.agents/skills/code-review-excellence/references/security-review-guide.md


1
2
3
4
5
6
7
8
9
10
11
12

# Security Review Guide

## Check for
- unsanitized input,
- SQL or shell injection,
- insecure deserialization,
- secret leakage,
- missing authz checks,
- unsafe filesystem or network defaults.

## Review note pattern
`Blocking: this path accepts untrusted input and passes it to X without validation.`