Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →vibeeval/security-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Passed 7 of 22 test cases with the skill, and 15 of 22 without it.
1 fixed16 passed either way3 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
A test case the skill fixed. Same model, same prompt, with and without the skill.
We are preparing a pre-deployment production checklist for our web application infrastructure. What transport layer and origin security configurations must be verified prior to going live?
| Checked | Without skill | With skill |
|---|---|---|
| Recommends enforcing HTTPS transport encryption. | Passed | Passed |
| Recommends configuring CORS policy restrictions. | Missed | Passed |
The instructions your model reads when the skill loads.
This skill ensures all code follows security best practices and identifies potential vulnerabilities.
const apiKey = "sk-proj-xxxxx" // Hardcoded secret
const dbPassword = "password123" // In source code
const apiKey = process.env.OPENAI_API_KEY
const dbUrl = process.env.DATABASE_URL
// Verify secrets exist
if (!apiKey) {
throw new Error('OPENAI_API_KEY not configured')
}
.env.local in .gitignoretest cases passed, vs 15 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.