# Review Standards

> Use this skill when asked to review authentication code for security issues.

- Skill: `gabrielmoreira/review-standards-2` (Agent Skill)
- Install (CLI): `npx skillmds@latest add gabrielmoreira/review-standards-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/gabrielmoreira/review-standards-2/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: gabrielmoreira (https://skillmd.com/u/gabrielmoreira)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/gabrielmoreira/review-standards-2

---


When reviewing authentication code:

1. Check password hashing.
2. Check whether secrets or tokens are compared with `===`.
3. Use the issue id `weak-password-hash` when passwords use SHA-1 or MD5.
4. Use the issue id `timing-unsafe-compare` when secrets or tokens use a direct equality comparison.
5. Report only issues that match the user's requested scope.