Review trust boundaries, auth/authz, injection, secrets, filesystem/network exposure, dependencies, and exploitability without pretending a shallow lint is an audit.
Scanned 9/4/2026
Install to Claude Code
Skills Directorynpx -y skills add gabrielmoreira/agent-skills-mirror --skill security-review --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Security Review?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/gabrielmoreira-security-review-agent-skills-mirror)More formats (shields.io, HTML) on the badges page.
---
name: security-review
description: Review trust boundaries, auth/authz, injection, secrets, filesystem/network exposure, dependencies, and exploitability without pretending a shallow lint is an audit.
invocation: model+user
---
# Security Review
## When to use
Use when looking for vulnerabilities, auth holes, secret leaks, or unsafe trust boundaries.
## Non-goals
- This is not a formal audit certificate.
- Do not claim exploitability without evidence.
## Workflow
1. Map trust boundaries and entry points.
2. Check auth/authz, injection, secrets, FS/network exposure, deps.
3. Rank findings by exploitability and impact.
4. Recommend fixes and verification steps.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
