security-review

Execute comprehensive security reviews using the OWASP checklist.

1|1|Updated Mar 9, 2026
One-click install
npx skills add https://github.com/Cure-Consulting-Group/ProductEngineeringSkills --skill security-review-cure-consulting-group
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/Cure-Consulting-Group/ProductEngineeringSkills/tree/main/skills/security-review
Command: npx skills add https://github.com/Cure-Consulting-Group/ProductEngineeringSkills --skill security-review-cure-consulting-group

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need for robust security in software development by providing a comprehensive checklist to identify and mitigate vulnerabilities across various system components.

Core Features & Use Cases

  • OWASP Checklist: Covers authentication, authorization, data protection, API security, mobile, web, and supply chain security.
  • Systematic Review: Guides users through a structured process to classify review types and gather necessary context.
  • Use Case: Before launching a new feature that handles user payments, run this security review to ensure all authentication, data handling, and API endpoints meet security best practices.

Quick Start

Run a full security review for the new mobile application.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security review before launching a new feature?▼

A code security review based on the OWASP checklist evaluates authentication, authorization, and data protection to identify vulnerabilities. It systematically guides you through classifying review types and gathering context to ensure applications meet security standards.

Can I use this security review skill to check API and mobile application vulnerabilities?▼

Yes, you can check API and mobile application vulnerabilities using this comprehensive security review. It specifically covers API security, mobile security, web, and supply chain security to identify common platform-specific weaknesses during audits.

What is the best way to audit supply chain security in my codebase?▼

The best way to audit supply chain security is to execute a comprehensive review using the OWASP checklist. It systematically classifies review types and gathers context to identify vulnerabilities across your supply chain, web, and API components.

Does this OWASP checklist cover data protection and authorization mechanisms?▼

Yes, the OWASP checklist covers data protection and authorization mechanisms. It systematically evaluates these areas alongside authentication, API security, and mobile and web vulnerabilities to ensure your application meets security standards.

When do I need to perform a comprehensive security review on my software?▼

You need to perform a comprehensive security review before launching new features, particularly those handling user payments or sensitive data. It is also required during regular audits to ensure applications continuously meet security standards.