security-review

Security review guidance for trust boundaries, auth, input handling, secret exposure, and meaningful application risk.

SKILL.md

GitHub

Core approach

  • Focus on meaningful security risk, not checkbox compliance language.
  • Review trust boundaries, data exposure, authn/authz paths, and risky defaults.
  • Prioritize concrete findings by severity and exploitability.
  • Distinguish confirmed issues from areas needing more evidence.

Practical guidance

  • Examine authentication, authorization, secrets, injection surfaces, deserialization, file handling, external calls, and dependency risk where relevant.
  • Consider both code-level issues and operational exposure.

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061