security-review

Comprehensive security checklist and patterns for authentication, input validation, secrets management, and sensitive operations.

affaan-m 232k ↓ 12k MIT updated 25d ago
Claude Code
View source ↗

What it does

  • Implementing authentication or authorization
  • Handling user input or file uploads
  • Creating new API endpoints
  • Working with secrets or credentials
  • Implementing payment features
  • Storing or transmitting sensitive data
  • Integrating third-party APIs

Requirements & configuration

  • JWT Token Handling
  • localStorage.setItem('token', token)
  • token=${token}; HttpOnly; Secure; SameSite=Strict; Max-Age=3600)
  • const token = request.headers.get('X-CSRF-Token')
  • if (!csrf.verify(token)) {

Configuration: SELECT

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

Comprehensive security checklist and patterns for authentication, input validation, secrets management, and sensitive operations.

Source

Repository: https://github.com/affaan-m/everything-claude-code

security-review FAQ

What does the security-review skill do?

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns. Implementing authentication or authorization Handling user input or file uploads

What does security-review require?

JWT Token Handling localStorage.setItem('token', token) token=${token}; HttpOnly; Secure; SameSite=Strict; Max-Age=3600) const token = request.headers.get('X-CSRF-Token') if (!csrf.verify(token)) { Configuration keys: SELECT.

How do I install security-review?

Run: npx -y skills add https://github.com/affaan-m/everything-claude-code --skill security-review --agent claude-code — the source lives at github.com/affaan-m/everything-claude-code.

Maintain security-review?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

security-review on getagentictools
[![security-review on getagentictools](https://getagentictools.com/badge/skills/affaan-m-everything-claude-code-security-review.svg)](https://getagentictools.com/skills/affaan-m-everything-claude-code-security-review?ref=badge)
npx agentictools info skills/affaan-m-everything-claude-code-security-review

The second line is the CLI lookup for this page — handy in READMEs and docs.