security-review

Review code, APIs, and data flows against a security checklist.

Updated Dec 18, 2025
One-click install
npx skills add https://github.com/JahanzaibTayyab/hackathon-2 --skill security-review-jahanzaibtayyab
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/JahanzaibTayyab/hackathon-2/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/JahanzaibTayyab/hackathon-2 --skill security-review-jahanzaibtayyab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill codifies security best practices and provides a comprehensive security checklist to preempt vulnerabilities in code, APIs, and data handling.

Core Features & Use Cases

  • Enforces secrets management, input validation, and robust authentication/authorization
  • Prevents common web vulnerabilities (SQL injection, XSS, CSRF) and promotes secure error handling
  • Applies to authentication workflows, API endpoints, payment features, and any data-handling components

Quick Start

Run a security review on new features and API changes to apply best-practice protections before deployment.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities before deployment?▼

To review code for security vulnerabilities, apply a comprehensive security checklist covering secrets management, input validation, SQL injection, XSS, CSRF, authentication, and rate limiting to identify and mitigate risks in APIs and data flows.

What is secure-by-default code review for API endpoints?▼

Secure-by-default code review for API endpoints is a risk assessment process that enforces input validation, robust authentication, authorization, rate limiting, and secure error handling to preempt vulnerabilities in web applications and services.

Can I use a security checklist for authentication and payment features?▼

Yes, you can use a security checklist for authentication and payment features to enforce secrets management, input validation, and secure error handling across data-handling components in web applications.

What's the best way to prevent SQL injection and XSS in my code?▼

The best way to prevent SQL injection and XSS in your code is to enforce strict input validation and apply a comprehensive security-review checklist to preempt vulnerabilities in data handling and API endpoints.

Does this security review cover secrets management and rate limiting?▼

Yes, this security review covers secrets management and rate limiting as part of a comprehensive checklist to mitigate risks in authentication workflows, API endpoints, and data-handling components.