security-review

Audit code for OWASP Top 10 vulnerabilities and provide secure development checklists.

330|35|Updated Jan 22, 2026

Search Tags:#code review #security #authentication #vulnerability #compliance #data protection

Ready to run

npx skills add https://github.com/zhukunpenglinyutong/ai-max --skill security-review-zhukunpenglinyutong

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/zhukunpenglinyutong/ai-max/tree/main/skills/security-review
Command: npx skills add https://github.com/zhukunpenglinyutong/ai-max --skill security-review-zhukunpenglinyutong

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill proactively identifies and mitigates security vulnerabilities in your code, ensuring robust protection against common and emerging threats.

Core Features & Use Cases

Comprehensive Security Checklist: Covers key areas like key management, input validation, SQL injection, authentication, authorization, XSS, CSRF, rate limiting, and dependency security.
Best Practice Guidance: Provides code examples and actionable steps for secure implementation.
Use Case: Before deploying a new API endpoint that handles user data, activate this Skill to perform a thorough security review, ensuring all potential vulnerabilities are addressed.

Quick Start

Run a full security review on the current codebase to identify potential vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a comprehensive security audit on my codebase before deployment?▼

To perform a comprehensive security audit, the Skill reviews your codebase against OWASP Top 10 principles, checking for vulnerabilities like SQL injection, XSS, and CSRF. It outputs actionable checklists and best practice guidance to ensure secure development.

What is the best way to check my API endpoints for authentication and input validation vulnerabilities?▼

The best way to check API endpoints for authentication and input validation vulnerabilities is to run a security review focused on these areas. The Skill identifies weaknesses and provides code examples for secure implementation to protect user data.

How does this approach identify SQL injection and XSS vulnerabilities in my code?▼

This approach identifies SQL injection and XSS vulnerabilities by systematically analyzing your code against secure coding standards. It detects inadequate input validation and provides actionable steps to mitigate these specific threats.

Can I use this security review for dependency management and key management checks?▼

Yes, you can use this security review for dependency management and key management checks. The comprehensive security checklist explicitly covers these areas to help prevent breaches and ensure robust data protection.

When do I need a dedicated code review for secure coding standards and OWASP Top 10 compliance?▼

You need a dedicated code review for OWASP Top 10 compliance when deploying new APIs or handling sensitive user data. The Skill proactively mitigates emerging threats by auditing authentication, rate limiting, and authorization mechanisms.