security-review

Review code against a security checklist covering vulnerabilities and best practices.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/yzlin/supa-opencode --skill security-review-yzlin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/yzlin/supa-opencode/tree/main/skills/security-review
Command: npx skills add https://github.com/yzlin/supa-opencode --skill security-review-yzlin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and helps you fix security vulnerabilities in your code, protecting your application and user data from common threats.

Core Features & Use Cases

  • Comprehensive Checklist: Covers critical areas like secrets management, input validation, SQL injection, XSS, CSRF, and more.
  • Best Practice Examples: Provides clear code examples for secure implementation in various languages and frameworks.
  • Use Case: Before deploying a new feature that handles user authentication and payment processing, activate this Skill to ensure all security best practices are followed, preventing potential data breaches.

Quick Start

Use the security-review skill to check the code for any potential security vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for security vulnerabilities before deployment?

To check code for security vulnerabilities before deployment, use a comprehensive security checklist covering secrets management, input validation, SQL injection, XSS, CSRF, and authentication. This process identifies common threats and provides best practice patterns for mitigation.

What is the best way to prevent SQL injection and XSS in my application?

The best way to prevent SQL injection and XSS is to apply secure implementation patterns like input validation and proper output encoding. Following established security best practices helps developers proactively mitigate these specific vulnerabilities in their codebase.

Does this security review cover authentication and authorization best practices?

Yes, security review covers authentication, authorization, and rate limiting best practices. It provides developers with clear code examples and comprehensive checklists to ensure secure implementation of user access controls and protect sensitive data.

Can I use this to find guidance on secrets management and data protection?

Yes, you can use this to find guidance on secrets management and sensitive data exposure. It offers specific best practice patterns and pre-deployment checks to help developers properly secure credentials and protect user data from exposure.

What security checks should I run for blockchain and dependency security?

For blockchain and dependency security, you should run automated security testing and pre-deployment checks. This ensures your code follows established best practices, mitigating vulnerabilities in smart contracts and third-party dependencies before release.