Security review
Open-source Codex skills library inspired by hamzafer/cursor-commands, with guardrail-first triggering for reliable workflow automation.
npx -y skills add gologo13/agent-skills --skill security-reviewAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Perform a comprehensive security review of the current code and provide specific remediation...; keywords: security, api, review, error. Use only on explicit request; before execution, review diffs and list impact scope.
SKILL.md
2.0 KB, as published. Nobody here has run it
Security Review
Overview
Perform a comprehensive security review of the current code and provide specific remediation steps with code examples for each security issue identified.
Steps
- Authentication & Authorization
- Verify proper authentication mechanisms
- Check authorization controls and permission systems
- Review session management and token handling
- Ensure secure password policies and storage
- Input Validation & Sanitization
- Identify SQL injection vulnerabilities
- Check for XSS and CSRF attack vectors
- Validate all user inputs and API parameters
- Review file upload and processing security
- Data Protection
- Ensure sensitive data encryption at rest and in transit
- Check for data exposure in logs and error messages
- Review API responses for information leakage
- Verify proper secrets management
- Infrastructure Security
- Review dependency security and known vulnerabilities
- Check HTTPS configuration and certificate validation
- Analyze CORS policies and security headers
- Review environment variable and configuration security
Security Review Checklist
- Verified proper authentication mechanisms
- Checked authorization controls and permission systems
- Reviewed session management and token handling
- Ensured secure password policies and storage
- Identified SQL injection vulnerabilities
- Checked for XSS and CSRF attack vectors
- Validated all user inputs and API parameters
- Ensured sensitive data encryption at rest and in transit
- Checked for data exposure in logs and error messages
- Reviewed dependency security and known vulnerabilities
- Analyzed CORS policies and security headers