security-review

Identify and mitigate security risks in authentication, input handling, and API endpoints.

Updated Aug 27, 2026

Search Tags:#security #authentication #audit #input-validation #api-security #code-review #secrets-management

Ready to run

npx skills add https://github.com/zerdos/spike-land-nextjs --skill security-review-zerdos

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/zerdos/spike-land-nextjs/tree/main/.github/skills/security-review
Command: npx skills add https://github.com/zerdos/spike-land-nextjs --skill security-review-zerdos

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill ensures code adheres to security best practices and helps teams identify vulnerabilities across authentication, input handling, secrets management, and API integrations.

Core Features & Use Cases

Secrets management checks and best practices
Input validation and data sanitization
Authentication and authorization safeguards
API security and secure data handling
Risk assessment and security auditing in code reviews

Quick Start

Run a security-review pass on the new codebase or PR to generate a comprehensive checklist and recommended fixes.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I run a security audit for API endpoints and authentication?▼

Run a security audit by reviewing API endpoints and authentication flows to identify vulnerabilities. The process delivers requirements for secure token handling, input validation, and safe data handling to mitigate risks during feature development.

What is the best way to check for secrets management issues in a code review?▼

Checking secrets management issues in a code review involves scanning for hardcoded credentials and verifying secure logging practices. This approach ensures code adheres to security best practices and prevents sensitive data exposure across integrations.

How does input validation protect API security during feature development?▼

Input validation protects API security by sanitizing incoming data before processing. This mechanism mitigates injection risks during feature development, ensuring that data handling and API integrations adhere to established security requirements.

Can I use this security review for integration work across authorization flows?▼

Yes, you can use this security review for integration work across authorization flows. It is designed to assess risks during API design and integration, delivering safeguards for secure token handling and authorization checks.

When do I need a security audit for my codebase?▼

You need a security audit for your codebase when developing new features, designing APIs, or performing integration work. This process identifies vulnerabilities in authentication, input handling, and secrets management before deployment.