Security Review
SkillSecurityScan code changes for security vulnerabilities including OWASP Top 10, hardcoded secrets, injection flaws, and authentication issues. Use after implementation to catch security problems before marking a task complete.
Then ask your AI: use the Security Review skill
Details
Instructions available. Your AI can read the instructions. Execution depends on the setup they require.
Account requirements not reviewed. Check the skill instructions before use; Ahel provides instructions and does not run this skill.
No other account needed.
Add it as a step in a pipeline you build on Ahel, or connect Ahel to Claude, ChatGPT, Cursor, Claude Code or Codex and ask your AI to use it.
What this skill tells your AI
The instructions your AI receives, as published by patleeman/task-factory in skills/security-review/SKILL.md and read by Ahel’s review.
Perform a security review of all code changes you just made for this task.
What to check
- Hardcoded secrets: API keys, passwords, tokens, connection strings in source code
- Injection: SQL injection, command injection, XSS via unsanitized user input
- Input validation: Is all external input validated at system boundaries?
- Authentication & authorization: Are sensitive endpoints protected? Are permissions checked?
- Data exposure: Are error messages leaking internal details? Are logs safe?
- Dependencies: Any known-vulnerable packages or insecure configurations?
- Cryptography: Weak algorithms, hardcoded IVs, missing encryption for sensitive data?
- Race conditions: TOCTOU bugs, shared mutable state without synchronization?
Instructions
- Review each file you changed or created with a security mindset
- If you find vulnerabilities, fix them immediately
- For secrets found in code, replace with environment variables
- For injection flaws, add parameterized queries or input sanitization
- After fixing, verify the fix doesn't break functionality
- Summarize findings with severity (critical / high / medium / low)
Signals
- GitHub stars
- 60
- Forks
- 3
- Last commit
- Mar 2026
- Hacker News mentions
- 1
Advanced
- Item type
- skill
- Key
security-review-patleeman- Source
- github.com/patleeman/task-factory
github.com/patleeman/task-factory
Related picks
Skill · mukul975
The pick for Vulnerabilitiesai-prompt-engineering-safety-review
Skill · github
The pick for Vulnerabilitiesaudit-dependencies
Skill · stbenjam
The pick for Dependenciesauditing-python-dependencies
Skill · jeremylongshore
The pick for Dependenciessecrets-exposure-review
Skill · naodeng
The pick for Secretssecrets-with-git-crypt
Skill · derailed-dash
The pick for Secrets