# Security Review

> 安全审查 — T 阶段 (Path C+)

- Skill: `wenjunduan/security-review` (Agent Skill)
- Install (CLI): `npx skillmds@latest add wenjunduan/security-review`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wenjunduan/security-review/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: wenjunduan (https://skillmd.com/u/wenjunduan)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wenjunduan/security-review

---

- [ ] 无硬编码密钥/Token
- [ ] SQL 参数化
- [ ] XSS 防护
- [ ] API 认证检查
- [ ] 敏感数据不入日志
- [ ] npm audit 无漏洞

cunzhi [SECURITY_PASSED] 确认后写入 verified.md。