Description
security-review is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It makes sure code follows security practice whenever a change touches a sensitive area. Its security checklist starts with secrets management and covers the other common risk areas. It applies when adding authentication or authorisation, handling user input or file uploads, creating new API endpoints, working with secrets or credentials, implementing payment features, storing or sending sensitive data, and integrating third-party APIs. It is a checklist that an agent applies while writing code, so issues are caught before they ship rather than after. It is a SKILL.md file that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows all three security audits passing.…
Highlights
- Checklist starting with secrets management
- Covers auth, input and uploads
- Covers payments and sensitive data
- Applied while code is written
Ratings & Reviews
No ratings yet
Be the first to rate security-review.
People also visit
django-security
Django security best practices, authentication, authorization, CSRF protection
backend-code-review
Use only when the user explicitly requests a review or audit of backend code
code-reviewer
Thorough code review with focus on security, performance, and best practices
security-review FAQ
What does the security-review skill do?
It applies a security checklist to code that handles authentication, user input, secrets, API endpoints, payments or sensitive data.
What is the first checklist item?
Secrets management.
When does it apply?
When adding auth, handling input, creating endpoints, working with credentials, implementing payments or integrating third-party APIs.
How do I install it?
Run: npx skills add https://github.com/affaan-m/ecc --skill security-review
Is it free?
Yes. It is free and open source.
Are there security findings?
The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.
What are the best security-review alternatives?
Popular alternatives to security-review include django-security, laravel-security and perl-security. See all security-review alternatives