# Agent Security Review

> Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

- Skill: `dokhacgiakhoa/agent-security-review` (Agent Skill, multi-file: 12 files)
- Install (CLI): `npx skillmds@latest add dokhacgiakhoa/agent-security-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dokhacgiakhoa/agent-security-review/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: Dokhacgiakhoa (https://skillmd.com/u/dokhacgiakhoa)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/dokhacgiakhoa/agent-security-review

---


# Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

## When to Activate

- Implementing authentication or authorization
- Handling user input or file uploads
- Creating new API endpoints
- Working with secrets or credentials
- Implementing payment features
- Storing or transmitting sensitive data
- Integrating third-party APIs

## Security Checklist

## 🧠 Knowledge Modules (Fractal Skills)

### 1. [1. Secrets Management](./sub-skills/1-secrets-management.md)
### 2. [2. Input Validation](./sub-skills/2-input-validation.md)
### 3. [3. SQL Injection Prevention](./sub-skills/3-sql-injection-prevention.md)
### 4. [4. Authentication & Authorization](./sub-skills/4-authentication-authorization.md)
### 5. [5. XSS Prevention](./sub-skills/5-xss-prevention.md)
### 6. [6. CSRF Protection](./sub-skills/6-csrf-protection.md)
### 7. [7. Rate Limiting](./sub-skills/7-rate-limiting.md)
### 8. [8. Sensitive Data Exposure](./sub-skills/8-sensitive-data-exposure.md)
### 9. [9. Blockchain Security (Solana)](./sub-skills/9-blockchain-security-solana.md)
### 10. [10. Dependency Security](./sub-skills/10-dependency-security.md)
### 11. [Automated Security Tests](./sub-skills/automated-security-tests.md)