sdcorejs-review-security-shared

Audit SDCoreJS agent workflows for security vulnerabilities with evidence-based findings.

2|Updated Apr 18, 2026
One-click install
npx skills add https://github.com/sdcorejs/sdcorejs-agent --skill sdcorejs-review-security-shared
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sdcorejs-review-security-shared
Source: https://github.com/sdcorejs/sdcorejs-agent/tree/main/plugin/skills/sdcorejs-review-security-shared
Command: npx skills add https://github.com/sdcorejs/sdcorejs-agent --skill sdcorejs-review-security-shared

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps catch common security mistakes in AI coding agent codebases before they ship by running a standardized, evidence-based security review across multiple SDCoreJS tracks.

Core Features & Use Cases

  • Cross-track security checklist: covers authentication, authorization, input validation, injection, secrets, transport security, dependency risk, and error/info leakage.
  • Stack-aware deepening: extends baseline checks with stack-specific guidance for Angular Portal, NestJS, and Next.js.
  • Evidence-first reporting: outputs Critical / Important / Minor findings with file:line references and includes a “Passed checklist items” signal.

Quick Start

Ask the AI to run a security review of the current changes before tagging a release.

Frequently Asked Questions about sdcorejs-review-security-shared

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review before a release?▼

Run a cross-track security audit by analyzing Git diffs and logs. This review checks authentication, injection, and dependency vulnerabilities, outputting structured Critical, Important, and Minor findings with file:line evidence.

What does an evidence-based security audit check for?▼

An evidence-based security audit requires grep-based proof to verify vulnerabilities. It checks for authorization gaps, input validation errors, secrets exposure, and transport security issues across Angular Portal, NestJS, and Next.js tracks.

Can I use this security check for third-party dependency integrations?▼

Yes, this security audit evaluates dependency risk during third-party integrations. It extends baseline checks with stack-specific guidance to identify vulnerabilities before you ship codebase changes.

How do I find injection and authorization vulnerabilities in NestJS?▼

Run a stack-aware security review to find injection and authorization vulnerabilities in NestJS. The audit gathers Git diff evidence and outputs structured findings with specific file:line references.

What is the best way to prepare an Angular Portal for a secure release?▼

The best way to secure an Angular Portal release is running a cross-track checklist audit. It validates error handling and info leakage, providing a passed checklist signal alongside structured vulnerability findings.

Why does my security review report show Minor and Critical findings?▼

Security review reports show Minor and Critical findings to categorize vulnerability severity. This structured output includes file:line references and grep-based proof, helping prioritize fixes for authentication, injection, and dependency risks.