Cc skill security review

Skill newmindsgroup/ai-agent-skills-library/dist/skills/cc-skill-security-review

Shared library of AI agent skills — works across Claude Code, Cursor, Codex, Windsurf, OpenCode, and Google Antigravity via a single universal installer.

Install

npx -y skills add newmindsgroup/ai-agent-skills-library --skill cc-skill-security-review

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints.

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

2.4 KB, as published. Nobody here has run it

Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

When to Use

Implementing authentication or authorization
Handling user input or file uploads
Creating new API endpoints
Working with secrets or credentials
Implementing payment features
Storing or transmitting sensitive data
Integrating third-party APIs

Core Workflow

Confirm the request matches this skill's trigger, scope, and risk profile.
Use the topic map to identify the relevant pattern, checklist, or example before writing detailed guidance or code.
Load references/full-guidance.md when implementation details, examples, anti-patterns, validation checks, or edge cases are needed.
Apply only the relevant guidance instead of loading or repeating the entire reference by default.
Verify the result against any validation checks, limitations, security notes, or platform constraints in the reference.

Topic Map

Security Checklist
Secrets Management
Input Validation
SQL Injection Prevention
Authentication & Authorization
XSS Prevention
CSRF Protection
Rate Limiting
Sensitive Data Exposure
Blockchain Security (Solana)
Dependency Security
Security Testing
Automated Security Tests
Pre-Deployment Security Checklist
Resources

Reference Map

references/full-guidance.md preserves the complete original guidance, including examples and detailed edge cases.

Limitations

Use this skill only when the task clearly matches the scope described above.
Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Progressive Loading

Keep this SKILL.md as the compact routing and workflow entrypoint. Load the reference file only when the user task requires the deeper implementation material.