security-review
Performs security analysis on code changes including credential scanning, input validation, authentication checks, and dependency vulnerability assessment. Use when reviewing code for security issues or before completing security-sensitive changes.
安装与使用
请根据来源仓库和你的 AI 工具说明安装此技能。先阅读技能文件和依赖要求，再添加到工作流。
查看来源 ↗使用指南技能说明
Security Review
Placeholder: This skill will be fully developed during the content migration phase.
When to use this skill
- When reviewing code for security vulnerabilities
- Before completing changes to authentication/authorization code
- When adding new dependencies
- During security-focused code reviews
Skill Contents
Available Resources
📚 references/ - Detailed documentation
Security Checks
| Check | Description |
|---|---|
| Credential scanning | Detect hardcoded secrets |
| Input validation | Verify user input is sanitized |
| Dependency audit | Check for vulnerable dependencies |
| Authentication | Review auth/authz implementations |
References
| Technology | Reference |
|---|---|
| Java | references/java/security-patterns.md |
| TypeScript | references/typescript/security-patterns.md |
| Python | references/python/security-patterns.md |
| Go | references/go/security-patterns.md |
TODO
- Define security check rules by technology
- Integrate with SonarQube MCP
- Add credential pattern detection
- Define severity levels and thresholds
使用示例
查看来源仓库中的使用示例与配置说明。
查看来源 ↗来源历史
- 收录时间
- 2026-01-20
- 索引更新时间
- 2026-01-28
- Branch
- main
收录与同步日期属于本站记录。源码修改历史请查看来源仓库。
GitHub ↗chat Comments (0)
Sign in to join the discussion and leave a comment.
No comments yet. Be the first to share your thoughts!