security-review

Review codebases against a security checklist for common vulnerabilities.

Updated Apr 13, 2026
One-click install
npx skills add https://github.com/IwatsukaYura/harness_template --skill security-review-iwatsukayura
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/IwatsukaYura/harness_template/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/IwatsukaYura/harness_template --skill security-review-iwatsukayura

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams identify and mitigate security risks in codebases by applying a comprehensive security review that covers authentication, input handling, secrets management, API design, and sensitive features.

Core Features & Use Cases

  • Security checklist coverage including secrets management, input validation, SQL injection prevention, XSS, CSRF, authentication/authorization, rate limiting, logging, and deployment hardening.
  • Step-by-step guidance for pre-deployment security and automated testing of security controls.
  • Use Case: A backend service implementing user authentication and payment processing can leverage this skill to enforce best practices and detect vulnerabilities before release.

Quick Start

Perform a security review of your project by applying the provided checklist to your codebase before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review on my codebase before deployment?▼

To perform a security review before deployment, apply a comprehensive checklist covering secrets management, input validation, SQL injection, XSS, CSRF, authentication, rate limiting, and logging to mitigate risks across web and server environments.

What is included in a comprehensive code security checklist?▼

A comprehensive code security checklist includes steps for secrets management, input validation, SQL injection prevention, XSS, CSRF, authentication, authorization, rate limiting, logging, and deployment hardening.

How do I prevent SQL injection and XSS vulnerabilities in my web application?▼

Prevent SQL injection and XSS vulnerabilities by enforcing a documented security checklist with specific steps for input validation, secure input handling, and output encoding during your code review process.

Does this security review cover authentication and payment processing features?▼

Yes, this security review explicitly covers authentication, authorization, input handling, secret management, API design, and payment processing to enforce best practices and detect vulnerabilities in backend services.

Can I use this security review for third-party API integrations?▼

Yes, you can use this security review for third-party integrations as it explicitly applies security review steps to API design and third-party integrations across web and server environments.

What's the best way to manage secrets and enforce rate limiting in my code?▼

The best way to manage secrets and enforce rate limiting is applying a step-by-step security checklist during code review, ensuring proper secret management and rate limiting configurations are verified before deployment.