Review Standards

Use this skill when asked to review authentication code for security issues.

gabrielmoreira Updated 17 repo stars

File contents

When reviewing authentication code:

  1. Check password hashing.
  2. Check whether secrets or tokens are compared with ===.
  3. Use the issue id weak-password-hash when passwords use SHA-1 or MD5.
  4. Use the issue id timing-unsafe-compare when secrets or tokens use a direct equality comparison.
  5. Report only issues that match the user's requested scope.

gabrielmoreira/agent-skills-mirror/tree/main/mirrors/repos/promptfoo@promptfoo/examples/claude-agent-sdk/skill-comparison/fixtures/v2/.claude/skills/review-standards commit ca740bf61d

Frequently asked questions

npx skillmds@latest add gabrielmoreira/review-standards-2