elixir-security-review

name	elixir-security-review
description	Reviews Elixir code for security vulnerabilities including code injection, atom exhaustion, and secret handling. Use when reviewing code handling user input, external data, or sensitive configuration.

Elixir Security Review

Quick Reference

Issue Type	Reference
Code.eval_string, binary_to_term	references/code-injection.md
String.to_atom dangers	references/atom-exhaustion.md
Config, environment variables	references/secrets.md
ETS visibility, process dictionary	references/process-exposure.md

Review Checklist

Critical (Block Merge)

• No Code.eval_string/1 on user input
• No :erlang.binary_to_term/1 without :safe on untrusted data
• No String.to_atom/1 on external input
• No hardcoded secrets in source code

Major