Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →lingxling/cc-skill-security-review
This skill ensures all code follows security best practices and identifies potential vulnerabilities.
Passed 11 of 22 test cases with the skill, and 11 of 22 without it.
2 fixed15 passed either way4 still failing1 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
We're getting ready to launch our Solana integration and API backend to production. Can you run a pre-deployment security checklist review on these endpoints to verify secret handling, transaction validation, rate limiting, and sensitive data exposure?
| Checked | Without skill | With skill |
|---|---|---|
| Requests missing endpoint details before running the security review | Missed | Passed |
| Advises storing API keys and credentials in environment variables | Passed | Passed |
The instructions your model reads when the skill loads.
This skill ensures all code follows security best practices and identifies potential vulnerabilities.
const apiKey = "sk-proj-xxxxx" // Hardcoded secret
const dbPassword = "password123" // In source code
const apiKey = process.env.OPENAI_API_KEY
const dbUrl = process.env.DATABASE_URL
// Verify secrets exist
if (!apiKey) {
throw new Error('OPENAI_API_KEY not configured')
}
.env.local in .gitignoretest cases passed, vs 11 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.