Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Scanned 5/27/2026
Install via CLI
openskills install H4D3ZS/vscodium-rust---
name: agent-security-review
description: Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
author: affaan-m
version: 4.1.0-fractal
---
# Security Review Skill
This skill ensures all code follows security best practices and identifies potential vulnerabilities.
## When to Activate
- Implementing authentication or authorization
- Handling user input or file uploads
- Creating new API endpoints
- Working with secrets or credentials
- Implementing payment features
- Storing or transmitting sensitive data
- Integrating third-party APIs
## Security Checklist
## 🧠 Knowledge Modules (Fractal Skills)
### 1. [1. Secrets Management](./sub-skills/1-secrets-management.md)
### 2. [2. Input Validation](./sub-skills/2-input-validation.md)
### 3. [3. SQL Injection Prevention](./sub-skills/3-sql-injection-prevention.md)
### 4. [4. Authentication & Authorization](./sub-skills/4-authentication-authorization.md)
### 5. [5. XSS Prevention](./sub-skills/5-xss-prevention.md)
### 6. [6. CSRF Protection](./sub-skills/6-csrf-protection.md)
### 7. [7. Rate Limiting](./sub-skills/7-rate-limiting.md)
### 8. [8. Sensitive Data Exposure](./sub-skills/8-sensitive-data-exposure.md)
### 9. [9. Blockchain Security (Solana)](./sub-skills/9-blockchain-security-solana.md)
### 10. [10. Dependency Security](./sub-skills/10-dependency-security.md)
### 11. [Automated Security Tests](./sub-skills/automated-security-tests.md)
No comments yet. Be the first to comment!
OpenCTI is an open-source platform for managing cyber threat intelligence knowledge, built on STIX 2.1 as its
Parse Apache and Nginx access logs to detect SQL injection attempts, local file inclusion, directory traversal,
Build an automated system to track adversary infrastructure using passive DNS, certificate transparency, WHOIS
Parse Windows LNK shortcut files to extract target paths, timestamps, volume information, and machine identifiers
'Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST