Agent Security Review

dokhacgiakhoa/agent-security-review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

3k tokens

context cost

the whole folder, loaded on every use

files

instructions only

copies elsewhere

how many repositories repackaged it

505

stars on the repo

on the repository, not the skill itself

Install

one command, takes just this skill from the repository

npx skills add https://github.com/Dokhacgiakhoa/Agent-Skills-4-Vibe-Coding-CLI --skill agent-security-review

What comes with it

11 477 bytes besides the instruction

sub-skills/1-secrets-management.md

sub-skills/10-dependency-security.md

sub-skills/2-input-validation.md

sub-skills/3-sql-injection-prevention.md

sub-skills/4-authentication-authorization.md

sub-skills/5-xss-prevention.md

sub-skills/6-csrf-protection.md

sub-skills/7-rate-limiting.md

sub-skills/8-sensitive-data-exposure.md

sub-skills/9-blockchain-security-solana.md

sub-skills/automated-security-tests.md

The instruction itself

15 sections, as written by the author

Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

When to Activate

Implementing authentication or authorization
Handling user input or file uploads
Creating new API endpoints
Working with secrets or credentials
Implementing payment features
Storing or transmitting sensitive data
Integrating third-party APIs

Security Checklist

🧠 Knowledge Modules (Fractal Skills)

1. 1. Secrets Management

2. 2. Input Validation

3. 3. SQL Injection Prevention

4. 4. Authentication & Authorization

5. 5. XSS Prevention

6. 6. CSRF Protection

7. 7. Rate Limiting

8. 8. Sensitive Data Exposure

9. 9. Blockchain Security (Solana)

10. 10. Dependency Security

11. Automated Security Tests

How to use it

Copy the folder

Take dokhacgiakhoa/agent-security-review from the repository into ~/.claude/skills for personal use, or into .claude/skills inside a project.

Check the name does not clash

The agent identifies a skill by the name field in its header. Two skills with the same name cannot sit side by side — one of them will be ignored.