secure-code-review
Use this skill when reviewing or writing code that handles user input, authentication, file I/O, network requests, or database queries. Always check for common security vulnerabilities before considering the code complete.
来源信息
- 仓库
- aiming-lab/MetaClaw
- 最近来源活动
- 2026年3月10日 18:04
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 3,464
- Forks
- 452
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- secure-code-review
- description
- Use this skill when reviewing or writing code that handles user input, authentication, file I/O, network requests, or database queries. Always check for common security vulnerabilities before considering the code complete.
- category
- coding
# Secure Code Review Checklist
**Input Validation:**
- Never trust user-supplied input; validate type, length, and format at boundaries.
- Use parameterized queries — never string-interpolate SQL.
- Sanitize before rendering HTML to prevent XSS.
**Secrets & Credentials:**
- No hardcoded passwords, API keys, or tokens in source code.
- Use environment variables or a secrets manager.
- Check `.gitignore` before adding any config files.
**Dependencies:**
- Pin dependency versions; audit with `pip audit` or `npm audit`.
- Minimize surface area: remove unused packages.
**Auth:**
- Verify authorization on every protected endpoint, not just at login.
- Use short-lived tokens; implement refresh flows.
在 GitHub 查看