Security Review Skill

Purpose

Systematically scan the codebase for security vulnerabilities and produce a prioritized report.

Checklist

🔴 Critical (Check First)

• Hardcoded secrets, API keys, passwords in source files

  grep -r "password\s*=\s*['\"]" src/
  grep -r "api_key\s*=\s*['\"]" src/
  

• .env files accidentally committed

  git log --all --full-history -- .env
  

• SQL injection via string concatenation
• Dynamic code execution (e.g. JS eval / new Function) with user input