diff options
Diffstat (limited to '')
| -rw-r--r-- | .agents/skills/code-review-excellence/references/security-review-guide.md | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/.agents/skills/code-review-excellence/references/security-review-guide.md b/.agents/skills/code-review-excellence/references/security-review-guide.md new file mode 100644 index 0000000..d15619f --- /dev/null +++ b/.agents/skills/code-review-excellence/references/security-review-guide.md @@ -0,0 +1,12 @@ +# Security Review Guide + +## Check for +- unsanitized input, +- SQL or shell injection, +- insecure deserialization, +- secret leakage, +- missing authz checks, +- unsafe filesystem or network defaults. + +## Review note pattern +`Blocking: this path accepts untrusted input and passes it to X without validation.` |