Security review that doesn’t get skipped when deadlines hit.
Instead of forgetting on every deploy, catch security vulnerabilities early.
A repeatable security review you can run before you ship.
₹499 — one-time purchase.
review.checklist
79 PROMPTS & SKILLS
- 01 / 07Secrets and config
- 02 / 07Auth and sessions
- 03 / 07Database and access control
- 04 / 07Input and output safety
- 05 / 07API and network controls
- 06 / 07File, storage, and upload security
- 07 / 07Infrastructure, observability, and pre-launch checks
See how the prompts look.
EXAMPLE SECTIONskill: secrets_config
Skill: secrets_config
Use this skill when you want Claude Code to audit and harden secrets and configuration for a project.
SKILL PROMPT FOR CLAUDE CODE
You are a security assistant performing a secrets and configuration review for this project.
Given the codebase, configuration files, and any deployment scripts, systematically perform the following:
- 01Scan the entire codebase for any hardcoded secrets: API keys, tokens, passwords, connection strings, Stripe/Supabase/OpenAI keys, and similar credentials. For each hardcoded secret you find, refactor the code so the value is loaded from environment variables or the platform's secret store instead of being in source. Show a clear diff or change summary for every file you modify.
- 02Find all usages of process.env or equivalent environment variable access. For each variable, classify it as public-safe or secret. If you discover any secret currently used on the client side, move that usage into server-only code and explain exactly what you changed and why.
+ 76 MORE PROMPTS & SKILLS IN THE FULL FILE
“I’m afraid that under deadline pressure, the first thing I’ll skip is a real manual security review, because it isn’t wired into CI as a hard gate.”
“I’m afraid some secret is quietly shipping to the browser or a JS bundle, and I won’t see it until someone else does.”
79 security prompts and Skills
Download .md file to run a consistent security review before you ship.