skills.rest
xu-xiang
xu-xiangCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify security gaps in authentication, input handling, secrets, and API endpoints.

1.8k|303|Updated Jan 27, 2026
Search Tags:#authentication#input-validation#api-security#code-review#secrets-management#security-review
One-click install
npx skills add https://github.com/xu-xiang/everything-claude-code-zh --skill security-review-xu-xiang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/xu-xiang/everything-claude-code-zh/tree/main/docs/zh-TW/skills/security-review
Command: npx skills add https://github.com/xu-xiang/everything-claude-code-zh --skill security-review-xu-xiang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and reviewers ensure that authentication, user input handling, secrets management, API endpoints, and payment-related features meet security best practices, reducing vulnerability risk.

Core Features & Use Cases

  • Comprehensive security checklist covering authentication, input validation, authorization, secrets handling, and data privacy.
  • Practical patterns and guidance for code reviews, CI/CD processes, and secure API design.
  • Use Case: when introducing a new API endpoint or payment flow, run this Skill to validate environment secrets, proper validation, and secure error handling.

Quick Start

Use the security-review skill during a new feature development to audit authentication, input validation, secrets handling, and API security.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for authentication and input validation security gaps?▼

To check code for security gaps, run a comprehensive security review that validates authentication mechanisms, input handling, and API endpoints against established best practices to reduce vulnerability risks.

What is the best way to audit payment flows and secrets management in microservices?▼

Auditing payment flows and secrets management in microservices involves verifying environment-based secrets, applying least-privilege IAM, and ensuring proper logging to meet secure API design standards.

Can I use this security review for cloud functions and web apps during feature development?▼

Yes, you can use this security review for cloud functions and web apps during feature development, as it applies to code reviews, infrastructure changes, and introduces practical patterns for CI/CD processes.

When do I need a comprehensive code review for API security and data privacy?▼

You need a comprehensive code review for API security and data privacy when introducing new API endpoints or payment flows, ensuring environment secrets, proper validation, and secure error handling are verified.

Does this security review require environment-based secrets and secure error handling to activate?▼

Yes, activation requires verifying environment-based secrets, least-privilege IAM, secure error handling, and proper logging to ensure the code meets strict security best practices before deployment.

Related Skills

Explore More Software Engineering Skills→
c0x12cc0x12c
96

terraform-security-audit

Automate Terraform security audits for IAM, networking, encryption, secrets, and compliance gaps.

Official
Advanced
HemantSudarshanHemantSudarshan

security-auditor

Audit software security posture across code, pipelines, and deployments.

Community
Advanced
kaustubhhiwarekaustubhhiware

security-reviewer

Audit code and cloud configurations for security vulnerabilities.

Community
Advanced
rahmatullahbossrahmatullahboss

File Path Traversal Testing

Test web applications for directory traversal vulnerabilities using payloads and encoding bypasses.

Community
Intermediate