Security Review

The security-review skill provides developers with a comprehensive security checklist and code patterns to prevent vulnerabilities when implementing authentication, handling user input, managing secrets, creating API endpoints, and working with sensitive data. It addresses critical security concerns including secrets management, input validation, SQL injection prevention, and other best practices through specific code examples and verification steps. The skill is designed for developers of any experience level who need to ensure their code follows security best practices and identify potential vulnerabilities before they reach production.

install copies · 90 days. Times the install command was copied on this site in the last 90 days, bots filtered.: 25
skills.sh installs: 11.5K
GitHub stars: 229.1K
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add affaan-m/everything-claude-code --skill security-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

When to Activate

Implementing authentication or authorization
Handling user input or file uploads
Creating new API endpoints
Working with secrets or credentials
Implementing payment features
Storing or transmitting sensitive data
Integrating third-party APIs

Security Checklist

1. Secrets Management

FAIL: NEVER Do This

const apiKey = "sk-proj-xxxxx"  // Hardcoded secret
const dbPassword = "password123" // In source code

PASS: ALWAYS Do This

const apiKey = process.env.OPENAI_API_KEY
const dbUrl = process.env.DATABASE_URL

// Verify secrets exist
if (!apiKey) {
  throw new Error('OPENAI_API_KEY not configured')
}