# Security Review

> Use when the user explicitly requests a security review, threat assessment, credential review, authorization review, or security-risk analysis.

- Skill: `rhenter/security-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add rhenter/security-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/rhenter/security-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: rhenter (https://skillmd.com/u/rhenter)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/rhenter/security-review

---


# Security Review

- Never hardcode credentials, tokens, passwords, or private keys.
- Apply least privilege.
- Validate untrusted input at boundaries.
- Review authentication and authorization separately.
- Check secret handling, logging exposure, injection, and dependency risks.