# security-audit

> Security review patterns and checklists

- Author: FelipevDesign
- Repository: FelipevDesign/prevc-spec
- Version: 20260125155446
- Stars: 2
- Forks: 0
- Last Updated: 2026-02-06
- Source: https://github.com/FelipevDesign/prevc-spec
- Web: https://mule.run/skillshub/@@FelipevDesign/prevc-spec~security-audit:20260125155446

---

---
name: security-audit
description: Security review patterns and checklists
phase: V
---

# Security Audit Skill

## Purpose

Identify and address security vulnerabilities.

## Security Checklist

### Input Handling
- [ ] All inputs validated
- [ ] SQL injection prevented
- [ ] XSS prevented
- [ ] File uploads validated

### Authentication
- [ ] Passwords hashed properly
- [ ] Sessions managed securely
- [ ] Rate limiting in place

### Authorization
- [ ] Access control implemented
- [ ] Row Level Security enabled
- [ ] No privilege escalation

### Data Protection
- [ ] Sensitive data encrypted
- [ ] HTTPS enforced
- [ ] No secrets in code

## Common Vulnerabilities

| Vulnerability | Prevention |
|---------------|------------|
| SQL Injection | Parameterized queries |
| XSS | Input sanitization |
| CSRF | Token validation |
| Broken Auth | Strong session mgmt |
| Sensitive Data | Encryption |

## Security Review Format

```markdown
## Security Review: [Component]

### Scope
[What was reviewed]

### Findings
| Severity | Issue | Recommendation |
|----------|-------|----------------|
| High | [Issue] | [Fix] |

### Recommendations
1. [Recommendation]
```

## Severity Levels

- **Critical**: Immediate exploitation possible
- **High**: Significant risk
- **Medium**: Moderate risk
- **Low**: Minor concern