AI agent skill · by @Dokhacgiakhoa

Agent Security Review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Archived 2026-10-23 · Source updated 2026-06-11. Check the original repository for the latest version.

SKILL.md instructions

# Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

## When to Activate

- Implementing authentication or authorization
- Handling user input or file uploads
- Creating new API endpoints
- Working with secrets or credentials
- Implementing payment features
- Storing or transmitting sensitive data
- Integrating third-party APIs

## Security Checklist

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [1. Secrets Management](./sub-skills/1-secrets-management.md)
### 2. [2. Input Validation](./sub-skills/2-input-validation.md)
### 3. [3. SQL Injection Prevention](./sub-skills/3-sql-injection-prevention.md)
### 4. [4. Authentication & Authorization](./sub-skills/4-authentication-authorization.md)
### 5. [5. XSS Prevention](./sub-skills/5-xss-prevention.md)
### 6. [6. CSRF Protection](./sub-skills/6-csrf-protection.md)
### 7. [7. Rate Limiting](./sub-skills/7-rate-limiting.md)
### 8. [8. Sensitive Data Exposure](./sub-skills/8-sensitive-data-exposure.md)
### 9. [9. Blockchain Security (Solana)](./sub-skills/9-blockchain-security-solana.md)
### 10. [10. Dependency Security](./sub-skills/10-dependency-security.md)
### 11. [Automated Security Tests](./sub-skills/automated-security-tests.md)