# Security Checklist

> Reviews code for security concerns, auth risks, and missing tests. Use when auditing a PR or investigating a bug fix.

- Skill: `yibie/security-checklist` (Agent Skill)
- Install (CLI): `npx skillmds@latest add yibie/security-checklist`
- Raw SKILL.md: https://api.skillmd.com/api/skills/yibie/security-checklist/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: yibie (https://skillmd.com/u/yibie)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/yibie/security-checklist

---


When reviewing code:
1. Check auth and permission boundaries.
2. Look for insecure defaults.
3. Call out missing tests for failure paths.
4. Flag untrusted input that reaches shell, SQL, or templates.