security-review

Review code against OWASP Top 10 security best practices.

Updated Feb 21, 2026
One-click install
npx skills add https://github.com/AndyHsuTW/everything-llm-workspace --skill security-review-andyhsutw
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/AndyHsuTW/everything-llm-workspace/tree/main/.agents/skills/security-review
Command: npx skills add https://github.com/AndyHsuTW/everything-llm-workspace --skill security-review-andyhsutw

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing a comprehensive checklist and best practices to prevent vulnerabilities.

Core Features & Use Cases

  • Vulnerability Identification: Detects common security flaws across various development aspects.
  • Best Practice Enforcement: Guides developers to implement secure coding patterns for secrets management, input validation, SQL injection prevention, authentication, XSS, CSRF, rate limiting, and more.
  • Pre-Deployment Checklist: Offers a final verification step before releasing code to production.
  • Use Case: Before deploying a new API endpoint that handles user data, activate this skill to ensure all security best practices, from input validation to authentication, are rigorously followed.

Quick Start

Run the security-review skill to check the current codebase for common security vulnerabilities.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for common security vulnerabilities before deployment?▼

To check for security vulnerabilities before deployment, run a comprehensive review covering secrets management, input validation, SQL injection, XSS, and CSRF. This ensures code adheres to OWASP Top 10 guidelines and platform-specific security best practices.

What is the best way to prevent SQL injection and XSS in web applications?▼

The best way to prevent SQL injection and XSS is to enforce secure coding patterns through input validation and proper output encoding. A security review checklist helps identify these common flaws and guides developers in implementing the necessary protective measures.

Does this security review cover authentication and authorization best practices?▼

Yes, this security review covers authentication and authorization best practices. It provides a comprehensive checklist that addresses these critical areas along with rate limiting and sensitive data exposure to ensure robust access control mechanisms.

How do I manage secrets and sensitive data exposure in my API endpoints?▼

To manage secrets and prevent sensitive data exposure in API endpoints, apply a pre-deployment security checklist. This verifies that best practices for secrets management and data protection are rigorously followed before releasing code to production.

When do I need a pre-deployment security checklist for software development?▼

You need a pre-deployment security checklist when preparing to release new features or API endpoints handling user data. It serves as a final verification step to ensure compliance with OWASP Top 10 and prevent vulnerabilities like CSRF and rate limiting issues.