skills.rest
Zenobia000
Zenobia000COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-review

Identify and mitigate security vulnerabilities in application code across full-stack workflows.

2|Updated Apr 7, 2026
Search Tags:#OWASP#security#input validation#secrets management#code audit#cloud security#vulnerability scanning
One-click install
npx skills add https://github.com/Zenobia000/ai-brainstorming --skill security-review-zenobia000
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Zenobia000/ai-brainstorming/tree/main/.claude/custom-rule%26skill/skills/security-review
Command: npx skills add https://github.com/Zenobia000/ai-brainstorming --skill security-review-zenobia000

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill eliminates the risk of overlooked security vulnerabilities when building features that handle user authentication, sensitive data, API endpoints, or payment processing, which can lead to data breaches, financial loss, and regulatory non-compliance.

Core Features & Use Cases

  • Comprehensive Security Checklists: Covers 10 core security domains including secrets management, input validation, SQL injection prevention, authentication/authorization, XSS/CSRF protection, rate limiting, and blockchain security.
  • Pre-Deployment Validation: Provides a consolidated checklist to verify all security controls are implemented correctly before pushing code to production.
  • Use Case: For example, when building a new user login endpoint, this Skill guides you to store authentication tokens in httpOnly cookies, validate login input with schema validation, add rate limiting to prevent brute force attacks, and ensure no secrets are hardcoded in the codebase.

Quick Start

Use the security-review skill to audit the new payment processing feature you are developing for security gaps before deploying it to production.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my application code for OWASP Top 10 vulnerabilities before deployment?▼

To check application code for OWASP Top 10 vulnerabilities before deployment, audit authentication, API endpoints, and sensitive data handling against a comprehensive security checklist covering SQL injection, XSS, and secrets management.

What is the best way to secure payment processing and user login endpoints in web applications?▼

Securing payment processing and user login endpoints requires validating inputs with schemas, storing authentication tokens in httpOnly cookies, applying rate limiting to prevent brute force attacks, and ensuring no hardcoded secrets exist in the codebase.

Does pre-deployment security validation cover cloud infrastructure configuration and CI/CD pipelines?▼

Pre-deployment security validation covers cloud infrastructure configuration and CI/CD pipelines by applying industry security best practices to full-stack development workflows, ensuring database query protection and endpoint security.

How do I prevent SQL injection and XSS/CSRF attacks during full-stack development?▼

Prevent SQL injection and XSS/CSRF attacks during full-stack development by implementing frontend input validation, backend API security controls, and database query protection according to industry security best practices.

When do I need a comprehensive security audit for my API endpoints and sensitive data?▼

A comprehensive security audit for API endpoints and sensitive data is needed before pushing code to production, especially when building features handling authentication, payment processing, or regulatory compliance requirements.

Can I use automated vulnerability scanning to find hardcoded secrets in my codebase?▼

Automated vulnerability scanning can find hardcoded secrets in your codebase by auditing sensitive data handling across 10 core security domains, including secrets management and authentication controls, before deployment.

Related Skills

Explore More Software Engineering Skills→
johngutierrez31johngutierrez31

security-reviewer

Audit code and infrastructure for security vulnerabilities using SAST tools.

Community
Advanced
HouseofmvpsHouseofmvps
115

security-audit

Scan web codebases for vulnerabilities and apply non-breaking fixes.

Community
Advanced
statick88statick88
1

vulnerability-scanning

Automate vulnerability detection across code, dependencies, containers, and infrastructure.

Community
Advanced
bugrabilgebugrabilge
10

vulnerability-scanner

Detect security vulnerabilities in code, running apps, and dependencies.

Community
Advanced