security-review
Review changed or existing code for authentication, authorization, input handling, injection, XSS, CSRF, SSRF, secret exposure, file upload, dependency, and…
Skill by PHENOMVALENCE
Chalk Labs
Need help deploying security-review?
Chalk Labs sets up agents like this inside real teams: connected to your tools, tested on your data, with a human in the loop where it matters.
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/phenomvalence-security-review
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/security-review
What's inside
- Skill name
security-review- Description
- Review changed or existing code for authentication, authorization, input handling, injection, XSS, CSRF, SSRF, secret exposure, file upload, dependency, and business-logic risks.
- License
- MIT
- Instructions
- 20 lines in SKILL.md · view on GitHub
Files (1)
- SKILL.md
SKILL.md (first lines)
# Security Review ## Workflow 1. Identify assets, trust boundaries, actors, and privileged operations. 2. Review authentication and session/token handling. 3. Verify authorization at every sensitive server-side action and object boundary. 4. Trace untrusted input into SQL, shell, templates, URLs, file paths, uploads, deserialization, and external requests. 5. Check output encoding, CSRF controls, CORS assumptions, rate limiting, and abuse cases. 6. Check secret handling, logs, error responses, configuration, and client bundles. 7. Review dependency additions and dangerous permissions. 8. Review payments/webhooks/idempotency/replay protections when relevant. 9. Prioritize findings by impact, exploitability, and evidence. 10. Fix verified issues and add regression coverage where practical. ## Rules - Do not report speculative vulnerabilities as confirmed facts. - Do not weaken validation, TLS, auth, or permission controls to simplify development. - Never commit real secrets or customer data into tests/fixtures.
From PHENOMVALENCE/engineering-agent-skills, MIT.
More from PHENOMVALENCE/engineering-agent-skills
- 0.524score
codebase-analysis
PHENOMVALENCE
Inspect and map an existing repository before making significant changes.
SkillBFreshness: BClaude Code +9 - 0.521score
nextjs
PHENOMVALENCE
Build and maintain modern Next.js applications with TypeScript, App Router conventions, clear server/client boundaries, accessible UI, and production…
SkillBFreshness: BClaude Code +9 - 0.521score
ci-cd
PHENOMVALENCE
Design or maintain CI/CD pipelines that provide reliable quality gates, reproducible builds, secure secret handling, and controlled deployments.
SkillBFreshness: BClaude Code +9 - 0.521score
specification
PHENOMVALENCE
Turn a feature, bug, integration, or refactor request into explicit requirements and acceptance criteria before implementation.
SkillBFreshness: BClaude Code +9 - 0.521score
performance
PHENOMVALENCE
Diagnose and improve application performance using measurement, profiling, query analysis, bundle/runtime inspection, and regression verification.
SkillBFreshness: BClaude Code +9 - 0.521score
debugging
PHENOMVALENCE
Diagnose defects systematically by reproducing the issue, isolating the failing layer, testing hypotheses, fixing root cause, and adding regression protection.
SkillBFreshness: BClaude Code +9 - 0.521score
deployment
PHENOMVALENCE
Prepare, execute, and verify safe deployments with preflight checks, migrations, configuration validation, rollback awareness, and production smoke tests.
SkillBFreshness: BClaude Code +9 - 0.521score
documentation
PHENOMVALENCE
Create and maintain concise project, architecture, API, setup, operational, and decision documentation alongside code changes.
SkillBFreshness: BClaude Code +9 - 0.521score
laravel
PHENOMVALENCE
Build and maintain Laravel applications using framework conventions, explicit validation/authorization, service boundaries, migrations, tests, queues, and API…
SkillBFreshness: BClaude Code +9 - 0.521score
frontend-design
PHENOMVALENCE
Design or improve production frontend interfaces with clear hierarchy, responsive behavior, accessibility, and consistency while preserving functionality.
SkillBFreshness: BClaude Code +9 - 0.518score
incremental-implementation
PHENOMVALENCE
Implement planned work in small, coherent, reversible steps with frequent verification and meaningful commits.
SkillBFreshness: BClaude Code +9 - 0.518score
git-workflow
PHENOMVALENCE
Manage branches, commits, pull requests, and release-safe Git history for agent-assisted engineering work.
SkillBFreshness: BClaude Code +9
Signals
- Stars
- 0
- Forks
- 0
- Open issues
- 0
- Last commit (this folder)
- Sep 16, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- MIT
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from PHENOMVALENCE
- 0.524score
codebase-analysis
PHENOMVALENCE
Inspect and map an existing repository before making significant changes.
SkillBFreshness: BClaude Code +9 - 0.521score
documentation
PHENOMVALENCE
Create and maintain concise project, architecture, API, setup, operational, and decision documentation alongside code changes.
SkillBFreshness: BClaude Code +9 - 0.521score
debugging
PHENOMVALENCE
Diagnose defects systematically by reproducing the issue, isolating the failing layer, testing hypotheses, fixing root cause, and adding regression protection.
SkillBFreshness: BClaude Code +9 - 0.521score
deployment
PHENOMVALENCE
Prepare, execute, and verify safe deployments with preflight checks, migrations, configuration validation, rollback awareness, and production smoke tests.
SkillBFreshness: BClaude Code +9 - 0.521score
ci-cd
PHENOMVALENCE
Design or maintain CI/CD pipelines that provide reliable quality gates, reproducible builds, secure secret handling, and controlled deployments.
SkillBFreshness: BClaude Code +9 - 0.521score
laravel
PHENOMVALENCE
Build and maintain Laravel applications using framework conventions, explicit validation/authorization, service boundaries, migrations, tests, queues, and API…
SkillBFreshness: BClaude Code +9
Done for you
Rather not set it up yourself?
Chalk Labs scopes, builds and runs agents for your team: the task audit, the eval harness, the integrations and the weekly ops report. Fixed scope, priced before we start.
See how we build AI agents →Read the case studies
Chalk Labs is a two-founder AI and growth studio. We build AI agents, CRMs and MVPs for Web3 and AI companies, and have shipped 50+ product and token launches.
- launches shipped
- 50+
- launches shipped
- media placements
- 500+
- media placements
- founders on every account
- 2
- founders on every account
Press we've placed: Forbes · CoinDesk · Decrypt · Cointelegraph · The Block
Rahil Jain, Co-founder, Chalk Labs. Ex-Goldman Sachs engineer. You talk to the person who builds it.
Get security-review running in your business
Tell us what you want to automate. A founder replies within one working day with a plan, not a pitch deck.
Cite this page
security-review skill. Agent Mart. https://agentmart.dev/skills/phenomvalence-security-review (last updated 2026-10-24)