agentleFS
Sign inStart free
codechupcodechup/claude-code-lab/.claude/skills/review-security/SKILL.md

review-security

Skill0 starsChanged 2 months agoMITView on GitHub

Prompt-only checklist for reviewing this repo's src/ for the common mistakes it is seeded with — unvalidated input, unhandled promise rejections, secrets in logs, unsanitised string interpolation.

22 other projects use a version of this.

Adopted by

Most recently taken up by

Used with

Projects with it also use review-bugbot, origin and 10 more.

Other files people use alongside this one.

Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
  • 0mlkrizzz655335vSkill

    review-bugbot

    缺陷导向代码审查。用 Bugbot 子代理找 bug。

    Also in 5 projects that use this

  • 0mlkrizzz655335vSkill

    origin

    origin CLI 管理。安装、登录、更新、修复 origin.cursor.com 的 CLI。"disabled-environments:

    Also in 3 projects that use this

  • nielsmadanSkill

    review-perf

    Performance analysis for algorithmic complexity, memory leaks, N+1 queries, and render issues. Use when code feels slow, after adding loops/queries, or before scaling up.

    Also in 3 projects that use this

  • PandelisZSkill

    update-cli-config

    View and modify Cursor CLI configuration settings in ~/.cursor/cli-config.json. Use when the user wants to change CLI settings, configure permissions, switch approval mode, enable vim mode, toggle display options, configure sandbox, or manage any CLI preferences.

    Also in 4 projects that use this

  • Tsumugii24Skill

    split-to-prs

    Split current work into small reviewable PRs. Use when the user asks to split a chat, set of changes, branch, or PR.

    Also in 5 projects that use this

  • 32103210Skill

    create-rule

    Create Cursor rules for persistent AI guidance. Use when you want to create a rule, add coding standards, set up project conventions, configure file-specific patterns, create RULE.md files, or asks about .cursor/rules/ or AGENTS.md.

    Also in 7 projects that use this

  • +1 more from 0mlkrizzz655335v

The file

Create a free account to mount
Files
SKILL.md

/review-security

Review $ARGUMENTS (default: all of src/) against this checklist. Report each finding as file:line — issue — fix, and say explicitly when a checklist item found nothing.

  1. Input validation — does every function that accepts external input (CLI args, HTTP request bodies) reject empty/negative/malformed values before using them?
  2. Unhandled promises — is every async call either awaited or has a .catch? A fire-and-forget call whose rejection is never observed is a bug, not a style nit.
  3. Secrets in logs — does anything console.log a token, key, or password value, even a placeholder one, in a code path that would run against a real credential?
  4. Unsanitised interpolation — does any handler splice untrusted input directly into a string that is later trusted as an instruction or template (the shape of a prompt-injection bug, even where there is no LLM call involved)?

This is a checklist skill only — it reads and reports, it does not edit src/.

Download now (ZIP)

Does it work?

Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.

Reviews can't be read right now.

Your trail

Files you open will collect here, so you can find them again.

Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.

Now do this for your own.

Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

Check your setup, free