security-review

Boundary

This skill conducts comprehensive security reviews on code, checking for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns. It focuses on security auditing, vulnerability assessment, and security best practices. It does NOT cover infrastructure security (use security-pro), DevSecOps pipelines (use ci-cd-pro), or specific framework security (use nextjs-security-scan for Next.js).

When to use

Use this skill when:

• Requesting a security review or security audit
• After writing code that handles user input
• After adding new API endpoints
• After modifying authentication/authorization logic
• Before deploying to production
• After adding external dependencies

DO NOT use this skill for:

• Infrastructure security (use security-pro skill)
• DevSecOps pipeline configuration (use ci-cd-pro skill)
• Framework-specific security (use nextjs-security-scan for Next.js)
• Network security or firewall configuration (use network-infra-pro skill)