security-checklists

Provide domain-specific security checklists for vulnerability reviews.

Updated Mar 18, 2025
One-click install
npx skills add https://github.com/zzoohub/mealio --skill security-checklists
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-checklists
Source: https://github.com/zzoohub/mealio/tree/main/.claude/skills/security-checklists
Command: npx skills add https://github.com/zzoohub/mealio --skill security-checklists

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security reviews often miss domain-specific gaps; this skill provides structured, domain-focused checklists to guide vulnerability assessments across authentication, API security, supply chains, and business logic.

Core Features & Use Cases

  • Includes dedicated checklists for Authentication & Authorization Security (auth.md), API Security (api.md), Business Logic Security (business-logic.md), and Supply Chain Security (supply-chain.md).
  • Helps security reviewers quickly reference relevant guidance during code reviews, secure API design, and supply chain audits.
  • Enables consistent, reusable review templates across projects.

Quick Start

Open the domain-specific checklists (auth.md, api.md, business-logic.md, supply-chain.md) and apply the guidance during security assessments.

Frequently Asked Questions about security-checklists

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a security checklist for vulnerability assessments?▼

A security checklist for vulnerability assessments provides structured, domain-specific guidance to review codebases and deployments. It covers authentication, API security, supply chains, and business logic to ensure consistent vulnerability identification across projects.

How do I review API security vulnerabilities during code reviews?▼

To review API security vulnerabilities, reference a dedicated API security checklist during code reviews. This structured checklist guides reviewers through specific API threat vectors and secure design principles to identify domain-specific gaps.

Does this security checklist cover authentication and authorization reviews?▼

Yes, this security checklist covers authentication and authorization reviews. It includes a dedicated auth.md checklist that guides vulnerability assessments specifically for auth mechanisms within your codebase and deployments.

Can I use these security checklists for supply chain audits?▼

Yes, you can use these security checklists for supply chain audits. The supply-chain.md checklist provides specific guidance to help reviewers identify vulnerabilities during supply chain security assessments.

What is the best way to ensure business logic security during assessments?▼

The best way to ensure business logic security is applying a dedicated business-logic.md checklist during assessments. It guides reviewers through structured checks to identify domain-specific vulnerabilities in business logic implementations.

When do I need a structured security review template?▼

You need a structured security review template when performing vulnerability assessments across multiple projects. It enables consistent, reusable reviews and prevents domain-specific gaps in authentication, API, business logic, and supply chain security.