Description
security-review is an agent skill that makes sure code follows security best practices and finds potential vulnerabilities. It is for implementing authentication or authorisation, handling user input or file uploads, creating API endpoints, working with secrets and credentials, implementing payment features, storing or transmitting sensitive data, and integrating third-party APIs. The skill works through a security checklist that begins with secrets management, so that credentials are never hard-coded and are handled through the proper channels. Use it before a change that touches one of these areas is merged, or when you want existing code reviewed against common security practice. It is part of the sickn33/agentic-awesome-skills repository on GitHub, which has about 47,600 stars. The listing shows it as free, and it has about 1,700 installs. Its security audits show passes from Gen Agent Trust Hub and Socket, with a warning from Snyk. Install it with npx skills add https://github.com/sickn33/agentic-awesome-skills --skill security-review.…
Highlights
- Security checklist for code changes
- Secrets management first
- Authentication and authorisation review
- Input and upload handling
- Payments and third-party integrations
Ratings & Reviews
No ratings yet
Be the first to rate security-review.
People also visit
security-review FAQ
When should it be used?
Before merging changes to authentication, authorisation, uploads, endpoints, secrets, payments or third-party integrations.
Where does the checklist start?
With secrets management.
Does it review existing code?
Yes. You can ask for existing code to be reviewed against common security practice.
How do I install it?
Run npx skills add https://github.com/sickn33/agentic-awesome-skills --skill security-review.
What do the security audits show?
skills.sh lists three audits: Gen Agent Trust Hub Pass, Socket Pass and Snyk Warn. A Warn or Fail is worth reading before you install.
What are the best security-review alternatives?
Popular alternatives to security-review include cc-skill-security-review, security-audit and quarkus-security. See all security-review alternatives