security-review

Identify and mitigate security risks in authentication, input handling, and API endpoints.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/zerdos/spike-land-nextjs --skill security-review-zerdos
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/zerdos/spike-land-nextjs/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/zerdos/spike-land-nextjs --skill security-review-zerdos

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill ensures code adheres to security best practices and helps teams identify vulnerabilities across authentication, input handling, secrets management, and API integrations.

Core Features & Use Cases

  • Secrets management checks and best practices
  • Input validation and data sanitization
  • Authentication and authorization safeguards
  • API security and secure data handling
  • Risk assessment and security auditing in code reviews

Quick Start

Run a security-review pass on the new codebase or PR to generate a comprehensive checklist and recommended fixes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit for API endpoints and authentication?

Run a security audit by reviewing API endpoints and authentication flows to identify vulnerabilities. The process delivers requirements for secure token handling, input validation, and safe data handling to mitigate risks during feature development.

What is the best way to check for secrets management issues in a code review?

Checking secrets management issues in a code review involves scanning for hardcoded credentials and verifying secure logging practices. This approach ensures code adheres to security best practices and prevents sensitive data exposure across integrations.

How does input validation protect API security during feature development?

Input validation protects API security by sanitizing incoming data before processing. This mechanism mitigates injection risks during feature development, ensuring that data handling and API integrations adhere to established security requirements.

Can I use this security review for integration work across authorization flows?

Yes, you can use this security review for integration work across authorization flows. It is designed to assess risks during API design and integration, delivering safeguards for secure token handling and authorization checks.

When do I need a security audit for my codebase?

You need a security audit for your codebase when developing new features, designing APIs, or performing integration work. This process identifies vulnerabilities in authentication, input handling, and secrets management before deployment.