What problem does it solve? Security is often treated as a final cleanup step, leading to missed authorization checks, leaked secrets, and unvalidated inputs reaching production. This Skill embeds structured security gates and checklists into planning, implementation, review, and deployment workflows. ## Core Features & Use Cases - Three Security Gates: Pre-development, during-implementation, and pre-acceptance checkpoints covering authentication, authorization, input validation, secrets, and deployment risk. - Domain Checklists: Detailed review criteria for API security, database security, frontend security, dependency hygiene, infrastructure, logging, and data protection. - Rejection Rules and Output Templates: Explicit conditions under which a Technical Product Owner must reject an implementation, plus a required security impact report format for developer agents. - Use Case: When reviewing a pull request that adds a file upload endpoint, apply the checklist to verify server-side validation, authorization enforcement, rate limits, and abuse-case tests before approval. ## Quick Start Use the security checklist to review this pull request for authentication, authorization, input validation, and secrets handling before approval.
