cc-skill-security-review
This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.
Security Assessment
Detected risks:
About cc-skill-security-review
The Security Review skill is a comprehensive code security analysis tool that systematically identifies vulnerabilities and ensures adherence to security best practices throughout your development workflow. It acts as an automated security consultant, examining code for common security pitfalls such as hardcoded secrets, SQL injection vulnerabilities, improper authentication mechanisms, and unsafe input handling. By integrating security checks directly into the development process, this skill helps prevent security incidents before they reach production.
This skill provides practical, actionable guidance across multiple security domains including secrets management, input validation, SQL injection prevention, and authentication/authorization patterns. It offers side-by-side comparisons of vulnerable code versus secure implementations, making it easy to understand not just what is wrong, but how to fix it correctly. The skill includes validation checklists for each security domain, ensuring comprehensive coverage of potential security issues. It supports modern development stacks with specific examples for TypeScript, Node.js, Supabase, and common web frameworks.
Ideal for development teams building web applications, APIs, or any software handling sensitive data, this skill is particularly valuable when implementing user authentication systems, processing file uploads, creating database-backed features, integrating third-party APIs, or handling payment processing. Whether you're a solo developer wanting to build secure applications from the start or a team lead conducting security reviews before deployment, this skill provides the expertise needed to identify and remediate security vulnerabilities efficiently.
FAQ
When should I use this skill in my development workflow?
Use this skill whenever you're implementing authentication or authorization, handling user input or file uploads, creating new API endpoints, working with secrets or credentials, implementing payment features, storing or transmitting sensitive data, or integrating third-party APIs. It's most effective when used during code reviews or before deploying new features.
What frameworks and languages does this skill support?
The skill provides specific examples for TypeScript, Node.js, and Supabase, with patterns using Zod for validation and modern JavaScript/TypeScript practices. However, the security principles and checklists apply broadly to any web application stack, and the concepts can be adapted to other languages and frameworks.
Does this skill automatically fix security vulnerabilities?
This skill identifies security issues and provides detailed guidance with code examples showing both vulnerable patterns to avoid and secure implementations to follow. It includes verification checklists to ensure comprehensive security coverage. While it guides you through the remediation process with concrete examples, you implement the fixes to maintain full control over your codebase.
What types of security vulnerabilities does this skill detect?
The skill covers secrets management (hardcoded credentials), input validation vulnerabilities, SQL injection risks, authentication and authorization flaws, XSS vulnerabilities through improper token storage, file upload security issues, and general security best practices for handling sensitive data and API integrations.
Do I need security expertise to use this skill effectively?
No prior security expertise is required. The skill provides clear explanations, side-by-side code comparisons showing vulnerable versus secure patterns, and practical checklists that guide you through security reviews step by step. It's designed to make security best practices accessible to developers at all experience levels.
Install cc-skill-security-review
Quick Setup:
- Copy the skill folder to
.claude/skills/ - Claude will automatically detect and use the skill
Repository
sickn33/antigravity-awesome-skills