cc-skill-security-review

Comprehensive security checklist covering secrets, input validation, authentication, and deployment readiness. This skill ensures all code follows security best practices and identifies potential vulnerabilities. Before ANY production deployment: Remember : Security is not optional. One vulnerability can compromise the entire platform. When in doubt, err on the side of caution. This skill is applicable to execute the workflow or actions described in the overview. - Covers 10 critical security domains: secrets management, input validation, SQL injection prevention, authentication/authorization, XSS prevention, CSRF protection, rate limiting, sensitive data exposure, blockchain wallet verification, and dependency security - Includes code examples for both unsafe and secure patterns across TypeScript, SQL, and configuration files - Provides pre-deployment checklist with 16 verification items and automated security test examples - Designed for activation when implementing authentication, handling user input, creating API endpoints, working with secrets, or building payment features - Implementing authentication or authorization - Handling user input or file uploads - Creating new API endpoints - Working with secrets or credentials - Implementing payment features - Storing or transmitting sensitive data - Integrating third-party APIs - OWASP Top 10 - Next.js Security - Supabase...