cc-skill-security-review
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist a...
Install with Tessl CLI
npx tessl i github:sickn33/antigravity-awesome-skills --skill cc-skill-security-review85
Does it follow best practices?
If you maintain this skill, you can automatically optimize it using the tessl CLI to improve its score:
npx tessl skill review --optimize ./path/to/skillEvaluation — 98%
↑ 1.25xAgent success when using this skill
Validation for skill structure
Evaluation results
100%
26%User Registration API Module
Input validation, SQL injection prevention, error handling
No hardcoded secrets
100%
100%
Env var for DB connection
100%
100%
Env var existence check
100%
100%
Zod schema used
0%
100%
Email validation
0%
100%
String length limits
0%
100%
No SQL concatenation
100%
100%
Parameterized SQL
100%
100%
Generic error message
100%
100%
No stack trace exposed
100%
100%
Without context: $0.4139 · 1m 49s · 18 turns · 67 in / 6,410 out tokens
With context: $0.7116 · 2m 17s · 29 turns · 289 in / 7,689 out tokens
100%
20%Secure Authentication Middleware for Admin Dashboard
JWT cookie auth, CSRF protection, rate limiting
httpOnly cookie for token
100%
100%
No localStorage token storage
100%
100%
SameSite=Strict on cookie
100%
100%
Secure flag on cookie
100%
100%
CSRF token verified
0%
100%
403 for CSRF failure
0%
100%
Rate limiting applied
100%
100%
Auth check before operation
100%
100%
Role check present
100%
100%
401/403 status codes
100%
100%
Without context: $0.2854 · 1m 23s · 11 turns · 12 in / 4,851 out tokens
With context: $0.6982 · 2m 30s · 25 turns · 285 in / 8,844 out tokens
94%
12%User Profile Content and Avatar Upload Module
HTML sanitization, file upload validation, safe logging
DOMPurify package used
33%
100%
ALLOWED_TAGS specified
100%
100%
ALLOWED_ATTR empty or restricted
100%
100%
File size check
100%
100%
File type whitelist
100%
100%
File extension check
0%
100%
No password in logs
100%
50%
Sensitive fields redacted
100%
100%
No full credentials logged
100%
100%
Without context: $0.5484 · 2m 14s · 24 turns · 73 in / 7,289 out tokens
With context: $0.6736 · 2m 24s · 25 turns · 333 in / 8,696 out tokens
- Evaluated
- Agent
- Claude Code
- Model
- Unknown
Table of Contents
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.