cc-skill-security-review

SKILL.md

Comprehensive security checklist covering secrets, input validation, authentication, and deployment readiness.

Covers 10 critical security domains: secrets management, input validation, SQL injection prevention, authentication/authorization, XSS prevention, CSRF protection, rate limiting, sensitive data exposure, blockchain wallet verification, and dependency security

Includes code examples for both unsafe and secure patterns across TypeScript, SQL, and configuration files

Provides pre-deployment checklist with 16 verification items and automated security test examples

Designed for activation when implementing authentication, handling user input, creating API endpoints, working with secrets, or building payment features

Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

When to Use

Implementing authentication or authorization

Handling user input or file uploads

Creating new API endpoints

Working with secrets or credentials

Implementing payment features

Storing or transmitting sensitive data

Integrating third-party APIs

Security Checklist

1. Secrets Management