security-review

Review authentication, input handling, secrets, and API design against security best practices.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/yulong-me/Xrunner --skill security-review-yulong-me
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/yulong-me/Xrunner/tree/main/.agent/skills/security-review
Command: npx skills add https://github.com/yulong-me/Xrunner --skill security-review-yulong-me

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Helps developers incorporate authentication, handle user input securely, manage secrets, and build robust, secure APIs with a comprehensive security pattern checklist.

Core Features & Use Cases

  • Security checklist covering secrets management, authentication and authorization, input validation, data handling, and secure API design.
  • Practical patterns for secure coding, threat modeling, and secure deployment across services and third-party integrations.
  • Use Case: When designing a new API or adding authentication, run this skill to identify vulnerabilities and apply safeguards early in the development lifecycle.

Quick Start

Run a concise security review across authentication, data handling, and API endpoints using the official checklist.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review for API authentication and input validation?

Run a security review using a structured checklist to validate authentication, input handling, access control, and API design. It identifies vulnerabilities and enforces secure coding patterns early in the development lifecycle.

What is threat modeling and how does it apply to secure backend services?

Threat modeling for secure backend services involves identifying vulnerabilities across data processing and third-party integrations. This approach applies practical patterns to guide secure coding, secrets management, and deployment across services.

Does this security review cover CSRF and XSS mitigations for API endpoints?

Yes, this security review validates CSRF and XSS mitigations for API endpoints. It enforces best practices across secure configuration, access control, and data handling through a comprehensive checklist of security patterns.

Can I use a security checklist to find secrets management vulnerabilities?

You can use a security checklist to find secrets management vulnerabilities by validating how secrets are handled across services. It covers authentication, authorization, and secure configuration to safeguard payment flows and data processing.

What's the best way to secure payment flows and data processing services?

The best way to secure payment flows and data processing services is applying a comprehensive security pattern checklist. It guides threat modeling, compliance checks, and secure API design to identify and enforce safeguards early.