sfermanelli-security-check

Audit code for security vulnerabilities and best practices.

1|Updated Mar 19, 2026

Search Tags:#authorization #security #authentication #vulnerability #audit #code-review

Ready to run

npx skills add https://github.com/sebafermanelli/sfermanelli-skills --skill sfermanelli-security-check

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sfermanelli-security-check
Source: https://github.com/sebafermanelli/sfermanelli-skills/tree/main/sfermanelli-security-check
Command: npx skills add https://github.com/sebafermanelli/sfermanelli-skills --skill sfermanelli-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit code for security vulnerabilities and best practices. It helps identify issues across authentication, authorization, input validation, data handling, and deployment configurations to reduce risk.

Core Features & Use Cases

Comprehensive vulnerability checklist for authentication, authorization, input validation, data protection, and configuration
RLS and data access review patterns with practical remediation guidance
Secure-by-design recommendations and exemplars for common stacks

Quick Start

Review the repository and return a prioritized list of security gaps with concrete remediation steps.

Frequently Asked Questions about sfermanelli-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my code for security vulnerabilities and best practices?▼

Reviewing repository code for security vulnerabilities involves applying a structured audit process and checklist to authentication, authorization, data access patterns, and deployment configurations, yielding a prioritized list of gaps with concrete fixes.

What security checks should I perform for API authentication and authorization flows?▼

Security checks for API authentication and authorization flows should validate policy enforcement, review token handling, audit data access patterns, and enforce secure-by-default designs to prevent unauthorized access and privilege escalation.

How do I review Row Level Security and data access patterns in my backend?▼

Review Row Level Security and data access patterns by applying structured audit patterns that check authorization boundaries and policy enforcement, providing practical remediation guidance to secure backend data protection layers.

Can I use this security audit for both frontend and backend code?▼

Yes, this security audit applies to both frontend and backend code, API services, auth flows, data access patterns, and deployment configurations, guiding comprehensive reviews and secure-by-design remediation across the entire stack.

What is the best way to identify secrets handling and input validation gaps in a repository?▼

The best way to identify secrets handling and input validation gaps is to run a structured vulnerability checklist that enforces a review process across data protection and deployment configurations, returning concrete remediation steps.