Security Review

Name: Security Review
Author: WenJunDuan

ASecurity

安全审查清单 — T 阶段 (Path C+)

188 stars
0 votes
0 copies
1 view
Added September 5, 2026

developmentsqlapisecurity

Works with

Security analysis

A100/100

Scanned September 5, 2026

npx -y skills add WenJunDuan/Rlues --skill security-review --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Security Review?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Security Review

[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/wenjunduan-security-review/badge)](https://www.skillsdirectory.com/skills/wenjunduan-security-review)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro

SKILL.md

---
name: security-review
description: 安全审查清单 — T 阶段 (Path C+)
context: main
---

## 触发
Path C+ 的 T 阶段。

## 工具

| 工具 | 调用方式 |
|:---|:---|
| security-guidance | Plugin, 自然语言: "安全审查当前变更" |
| security-auditor agent | 子代理 (background), Path C+ 自动启动 |

## 检查项 (VibeCoding 补充)

- [ ] 无硬编码密钥/Token/密码
- [ ] SQL 查询使用参数化 (无字符串拼接)
- [ ] 用户输入已做 XSS 防护
- [ ] API 端点有认证/授权检查
- [ ] 敏感数据不出现在日志中
- [ ] 依赖无已知漏洞 (`npm audit`)

## 输出
cunzhi [SECURITY_PASSED] 确认后写入 verified.md。