Verified:GitHub

security-review

Name: security-review
Availability: InStock
Author: Zardus

Identify and remediate security vulnerabilities across authentication, input validation, secrets, APIs, and deployments.

1|1|Updated Mar 31, 2026

Search Tags:#authorization #security #authentication #input-validation #code-review #secrets-management #secure-deployment

Ready to run

npx skills add https://github.com/zardusai-cyber/zardus_setup --skill security-review-zardusai-cyber

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/zardusai-cyber/zardus_setup/tree/main/ecc/skills/security-review
Command: npx skills add https://github.com/zardusai-cyber/zardus_setup --skill security-review-zardusai-cyber

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Teams often ship features without consistent security checks, leading to vulnerabilities in authentication, input handling, secrets management, and deployment. This skill provides a structured, actionable framework to identify and remediate risks early in the software lifecycle.

Core Features & Use Cases

Comprehensive security checklist: A thorough, actionable set of controls covering secret management, input validation, access control, and secure API design.
Practical security patterns: Ready-to-adapt code patterns and configurations for authentication, authorization, CSRF/XSS protection, and secure deployment.
Use Case: Before launching a new web service, perform an end-to-end security review using the provided templates and examples to reduce risk.

Quick Start

Audit your codebase for security best practices and vulnerabilities across authentication, input handling, secrets management, APIs, and deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security review on my web service before launch?▼

A security review for microservices audits distributed authentication, input validation, API endpoints, and secrets management across independent services, applying structured checklists to identify and remediate vulnerabilities within decentralized architectures.

What security patterns should I use for authentication and CSRF protection?▼

Use practical, battle-tested security patterns for authentication and authorization, including parameterized queries, XSS/CSRF protection, and secrets management configurations adapted for web services and serverless architectures.

How do I check for secrets management vulnerabilities in my CI/CD pipeline?▼

Check secrets management vulnerabilities by auditing your CI/CD and cloud environments against structured security controls to ensure sensitive credentials are properly handled and secure deployment practices are enforced.

Can I use this security audit framework for serverless architectures?▼

Yes, you can use this security audit framework for serverless architectures, as it specifically applies structured checklists and real-world examples to identify and remediate risks across web services, microservices, and serverless environments.

What is the best way to remediate input validation and API endpoint vulnerabilities?▼

The best way to remediate input validation and API endpoint vulnerabilities is by applying actionable security patterns and parameterized queries provided by a comprehensive checklist to enforce secure API design and access control.

Why do I need a structured checklist for codebase security audits?▼

You need a structured checklist for codebase security audits to ensure consistent identification and remediation of risks early in the software lifecycle, preventing teams from shipping features without comprehensive security checks.