security-review

Quick Review

Excellent security review skill with comprehensive coverage of critical security domains (secrets, input validation, SQL injection, XSS, CSRF, auth, rate limiting). The description clearly identifies when to invoke this skill. Task knowledge is strong with concrete code examples showing both wrong and correct patterns across TypeScript/Next.js/Supabase stack. Structure is well-organized with categorical sections and verification checklists. The skill provides substantial value by codifying security best practices that would otherwise require many tokens or manual review. Minor room for improvement: could reference separate files for framework-specific patterns if extensibility is needed, and novelty is moderate since security checklists exist elsewhere, though the executable code examples and stack-specific guidance add clear value.