skills.rest
Ying-Kai-Liao
Ying-Kai-LiaoCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Review code for security vulnerabilities in authentication, input handling, and secrets management.

1|Updated Jan 11, 2026
Search Tags:#security#authentication#review#input-validation#api-security#secrets-management
One-click install
npx skills add https://github.com/Ying-Kai-Liao/TouchStone --skill security-review-ying-kai-liao
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Ying-Kai-Liao/TouchStone/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/Ying-Kai-Liao/TouchStone --skill security-review-ying-kai-liao

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps developers identify and mitigate security vulnerabilities across authentication, input handling, secrets management, API endpoints, and payment-related features, ensuring secure-by-default patterns.

Core Features & Use Cases

  • Provides a comprehensive security checklist covering secrets management, input validation, authentication & authorization, CSRF, rate limiting, and secure data handling.
  • Guides secure API design, token handling, and safe integration with third-party services.
  • Use Case: During code reviews or CI checks, apply this skill to enforce security best practices and reduce risk in new and existing features.

Quick Start

Run a quick security review on newly added authentication, input handling, and secrets usage in the codebase.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for authentication and input validation vulnerabilities?▼

To check for authentication and input validation vulnerabilities, apply a comprehensive security review checklist that enforces secure-by-default patterns across authentication flows, input handling, and authorization checks in your codebase.

What security checks should I run for API endpoints and third-party integrations?▼

Security checks for API endpoints should cover token handling, CSRF protection, rate limiting, and secrets management to ensure safe integration with third-party services and reduce risk in API integrations.

How do I enforce secrets management best practices during a code review?▼

Enforce secrets management best practices during code review by applying a security checklist that identifies exposed secrets, validates secure logging patterns, and mitigates vulnerabilities in payment-related features.

Can I integrate automated security checks into my CI pipeline for new features?▼

You can integrate automated security checks into CI pipelines to enforce secure-by-default patterns, validating input handling, authentication, and API security across newly added feature implementations and code reviews.

What is the best way to secure payment-related features and sensitive data handling?▼

The best way to secure payment-related features is implementing a thorough security review that mitigates vulnerabilities in secrets management, enforces input validation, and ensures secure data handling across API endpoints.

Related Skills

Explore More Software Engineering Skills→
Chid0kChid0k

js-recon

Analyze JavaScript source code for security vulnerabilities and API endpoints.

Community
Advanced
kartikkabadikartikkabadi

vibe-security

Audit codebases for security vulnerabilities in authentication, payments, and secrets.

Community
Advanced
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate
CassiiopeiaCassiiopeia
7

pro-refactor-analyze

Detect code smells and generate refactoring plans without modifying source code.

Community
Advanced