Security Checklist

About

Equip your development workflow with a rigorous security auditing system designed to catch vulnerabilities before they reach production. This skill provides structured templates and domain-specific guidance for critical areas including authentication, authorization, data protection, and API security, drawing on industry standards like the OWASP Top 10. By integrating threat modeling and detailed input validation checks into the development process, it helps teams maintain a high security posture while streamlining the review process for engineers and security specialists alike.

Key Features

• 2 GitHub stars
• Threat modeling framework for identifying assets, actors, and attack vectors
• Data protection standards for encryption at rest and in transit
• Comprehensive security review template for auditing features and data handling
• Detailed checklists for authentication, authorization, and session management
• Input validation guidelines for preventing SQLi, XSS, and command injection

Use Cases

• Auditing new features that handle PII or sensitive financial data before deployment
• Verifying authentication and authorization logic during the code review process
• Performing threat modeling for new API endpoints and third-party integrations