Security Review | Skills Pool

스킬 파일

Security Review

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

LongTheta0 스타2026. 3. 19.

직업
카테고리: 보안

스킬 내용

Security Review Skill

This skill ensures all code follows security best practices and identifies potential vulnerabilities.

When to Activate

Implementing authentication or authorization
Handling user input or file uploads
Creating new API endpoints
Working with secrets or credentials
Implementing payment features
Storing or transmitting sensitive data
Integrating third-party APIs

Security Checklist

1. Secrets Management

❌ NEVER Do This

const apiKey = "sk-proj-xxxxx"  // Hardcoded secret
const dbPassword = "password123" // In source code

✅ ALWAYS Do This

관련 스킬

const apiKey = process.env.OPENAI_API_KEY
const dbUrl = process.env.DATABASE_URL

if (!apiKey) {
  throw new Error('OPENAI_API_KEY not configured')
}

const query = `SELECT * FROM users WHERE email = '${userEmail}'`

const { data } = await supabase
  .from('users')
  .select('*')
  .eq('email', userEmail)

await db.query('SELECT * FROM users WHERE email = $1', [userEmail])

npm audit
npm audit fix
npm update
npm outdated