skills.rest
vrcms
vrcmsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and mitigate security vulnerabilities in application code using checklists and secure coding patterns.

1|Updated Apr 6, 2026
Search Tags:#security#authentication#vulnerability#audit#compliance#best-practices
One-click install
npx skills add https://github.com/vrcms/everything-qwen-code --skill security-review-vrcms
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/vrcms/everything-qwen-code/tree/main/.qwen/skills/security-review
Command: npx skills add https://github.com/vrcms/everything-qwen-code --skill security-review-vrcms

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the critical need for consistent security oversight during development, preventing vulnerabilities like SQL injection, XSS, and unauthorized data access before they reach production.

Core Features & Use Cases

  • Comprehensive Security Checklist: Provides actionable verification steps for secrets management, input validation, and authentication.
  • Vulnerability Prevention: Offers secure coding patterns for SQL queries, JWT handling, and sensitive data exposure.
  • Use Case: When implementing a new user authentication module, activate this skill to ensure your JWT storage, password handling, and authorization checks align with industry-standard security practices.

Quick Start

Use the security-review skill to audit the authentication module in the current project for potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my application code for OWASP compliance and security vulnerabilities?▼

To audit application code for OWASP compliance and vulnerabilities, apply comprehensive security checklists covering input validation, authentication, and sensitive data handling to identify SQL injection and XSS risks before production.

What is the best way to implement secure JWT handling and authentication patterns?▼

The best way to implement secure authentication patterns is to verify JWT storage, password handling, and authorization checks against industry-standard secure coding practices to prevent unauthorized data access.

How do I check my API endpoints for input sanitization and sensitive data exposure?▼

To check API endpoints for input sanitization and sensitive data exposure, review API creation logic against secure coding patterns to ensure proper input validation and prevent unauthorized data access.

Can I use a proactive security audit for secret management across various tech stacks?▼

Yes, proactive security audits apply to secret management across various tech stacks by providing actionable verification steps to ensure secure storage and handling of application secrets.

Why does my application code still have SQL injection risks despite basic validation?▼

SQL injection risks persist despite basic validation when code lacks secure coding patterns for SQL queries and comprehensive input sanitization required to mitigate injection attacks before deployment.

Related Skills

Explore More Software Engineering Skills→
developerfreddeveloperfred

clarity-audit

Audit Clarity smart contracts with structured phases and vulnerability checklists.

Community
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
uphiagouphiago
1.1k

hunt-fastapi

Detect FastAPI-specific vulnerabilities including OpenAPI schema exposure and DI authorization gaps.

Community
Intermediate