security-review

Reviews software security across secrets, injection, auth, and XSS risks.

Updated Jan 20, 2026
One-click install
npx skills add https://github.com/Xyxy1722/Agent-skills --skill security-review-xyxy1722
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Xyxy1722/Agent-skills/tree/main/develop/security-review
Command: npx skills add https://github.com/Xyxy1722/Agent-skills --skill security-review-xyxy1722

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers identify and fix security vulnerabilities in their code, ensuring applications are robust against common threats.

Core Features & Use Cases

  • Comprehensive Security Checklist: Covers secrets management, input validation, SQL injection, XSS, CSRF, and more.
  • Best Practice Examples: Provides code snippets for secure implementation in TypeScript and SQL.
  • Use Case: Before deploying a new feature that handles user input and interacts with a database, run this skill to ensure all security best practices are followed.

Quick Start

Run the security review checklist to identify potential vulnerabilities in the codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is included in a comprehensive code security review checklist?

A comprehensive code security review checklist includes secrets management, input validation, SQL injection prevention, authentication, authorization, XSS, CSRF, rate limiting, sensitive data exposure, and dependency security.

How do I prevent SQL injection and XSS when building features with user input?

To prevent SQL injection and XSS, apply secure coding best practices such as strict input validation, parameterized queries, and proper output encoding. This Skill provides actionable code examples in TypeScript and SQL for these implementations.

What's the best way to secure authentication and manage secrets in my application?

The best way to secure authentication and manage secrets is to follow established security best practice patterns. This involves implementing robust authorization checks and secure storage mechanisms to protect user data.

Does this security checklist provide implementation examples for TypeScript and SQL?

Yes, this security checklist provides best practice code snippets specifically for secure implementation in TypeScript and SQL to help developers fix vulnerabilities.

When should I run a security review on my codebase?

You should run a security review on your codebase before deploying a new feature, especially when it handles user input and interacts with a database, to ensure all security best practices are followed.