skills.rest
sebafermanelli
sebafermanelliCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

sfermanelli-security-check

Audit code for security vulnerabilities and best practices.

1|Updated Mar 19, 2026
Search Tags:#authorization#security#authentication#vulnerability#audit#code-review
One-click install
npx skills add https://github.com/sebafermanelli/sfermanelli-skills --skill sfermanelli-security-check
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sfermanelli-security-check
Source: https://github.com/sebafermanelli/sfermanelli-skills/tree/main/sfermanelli-security-check
Command: npx skills add https://github.com/sebafermanelli/sfermanelli-skills --skill sfermanelli-security-check

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit code for security vulnerabilities and best practices. It helps identify issues across authentication, authorization, input validation, data handling, and deployment configurations to reduce risk.

Core Features & Use Cases

  • Comprehensive vulnerability checklist for authentication, authorization, input validation, data protection, and configuration
  • RLS and data access review patterns with practical remediation guidance
  • Secure-by-design recommendations and exemplars for common stacks

Quick Start

Review the repository and return a prioritized list of security gaps with concrete remediation steps.

Frequently Asked Questions about sfermanelli-security-check

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my code for security vulnerabilities and best practices?▼

Reviewing repository code for security vulnerabilities involves applying a structured audit process and checklist to authentication, authorization, data access patterns, and deployment configurations, yielding a prioritized list of gaps with concrete fixes.

What security checks should I perform for API authentication and authorization flows?▼

Security checks for API authentication and authorization flows should validate policy enforcement, review token handling, audit data access patterns, and enforce secure-by-default designs to prevent unauthorized access and privilege escalation.

How do I review Row Level Security and data access patterns in my backend?▼

Review Row Level Security and data access patterns by applying structured audit patterns that check authorization boundaries and policy enforcement, providing practical remediation guidance to secure backend data protection layers.

Can I use this security audit for both frontend and backend code?▼

Yes, this security audit applies to both frontend and backend code, API services, auth flows, data access patterns, and deployment configurations, guiding comprehensive reviews and secure-by-design remediation across the entire stack.

What is the best way to identify secrets handling and input validation gaps in a repository?▼

The best way to identify secrets handling and input validation gaps is to run a structured vulnerability checklist that enforces a review process across data protection and deployment configurations, returning concrete remediation steps.

Related Skills

Explore More Software Engineering Skills→
jd-opensourcejd-opensource
299

pentest-recon-attack-surface

Correlate external scans, browser exploration, and source code to map application attack surfaces.

Official
Advanced
wewetv1987-cellwewetv1987-cell

security-auditor

Audit application code and architecture for security vulnerabilities with OWASP-oriented checks.

Community
Advanced
macaughmacaugh
5

Static Vulnerability Analysis

Detects injection, memory safety and authorization flaws in multiple languages.

Community
Advanced
cornmanwtfcornmanwtf

penetration-testing-runner

Execute automated SAST/DAST and vulnerability scans for security compliance.

Community
Advanced