メニュー
Use when reviewing or fixing security issues, auth bypass, authorization, input validation, injection, XSS, CSRF, secrets, sensitive data leaks, rate limits, tenant isolation, or unsafe dependencies.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Use when creating, updating, reviewing, or debugging vector databases, embeddings, semantic search, RAG (Retrieval-Augmented Generation), similarity search, semantic caching, LLM cost optimization, pgvector, Pinecone, Weaviate, Qdrant, Chroma, Milvus, or embedding models.
Use when creating, updating, reviewing, or debugging API endpoints, routes, controllers, services, request validation, responses, or REST/HTTP handlers.
Use when creating, updating, reviewing, or debugging authentication, login, registration, sessions, JWT, OAuth, password reset, auth middleware, roles, permissions, or account security.
Use when creating, updating, reviewing, or debugging billing, payments, subscriptions, invoices, checkout, payment providers, webhooks, refunds, plans, or paid access.
Use when creating, updating, reviewing, or debugging caching, cache keys, TTL, invalidation, Redis, in-memory cache, CDN cache, performance, stale data, or cache-related bugs.
Use when creating, updating, reviewing, or debugging shopping carts, add-to-cart, cart items, guest carts, authenticated carts, cart merge, quantities, pricing, stock checks, or checkout preparation.
| name | security-review |
| description | Use when reviewing or fixing security issues, auth bypass, authorization, input validation, injection, XSS, CSRF, secrets, sensitive data leaks, rate limits, tenant isolation, or unsafe dependencies. |
Use this skill to find and fix security risks without changing unrelated behavior.
Before changing security-sensitive code, check existing patterns for:
Check for:
Review carefully when touching:
Cover relevant paths:
