# wa-security-review

> Conduct a focused security audit based on the Well-Architected Framework Security pillar. Use when user says "security review", "wa security", or "security audit". Analyzes authentication, authorization, data protection, input validation, and secrets management.

- Author: Brendan Kowitz
- Repository: brendankowitz/fhirpath-lab-dotnet
- Version: 20260208213245
- Stars: 1
- Forks: 0
- Last Updated: 2026-02-09
- Source: https://github.com/brendankowitz/fhirpath-lab-dotnet
- Web: https://mule.run/skillshub/@@brendankowitz/fhirpath-lab-dotnet~wa-security-review:20260208213245

---

---
name: wa-security-review
description: >
  Conduct a focused security audit based on the Well-Architected Framework Security pillar.
  Use when user says "security review", "wa security", or "security audit".
  Analyzes authentication, authorization, data protection, input validation, and secrets management.
---

# Well-Architected Security Review

Conduct a focused security audit based on the Well-Architected Framework Security pillar.

**Usage**: When user says "security review", "wa security", or "security audit"

## Security Pillar Focus Areas

- Authentication & Authorization (identity management, RBAC)
- Data Protection (encryption at rest/transit, PII handling)
- Input Validation (SQL injection, XSS, command injection prevention)
- Secrets Management (no hardcoded credentials)
- Security Headers & Configuration

## Analysis Targets

Analyze the codebase for:
- 🚨 Critical security vulnerabilities (hardcoded secrets, SQL injection risks)
- ⚠️ Security weaknesses (missing authorization, weak encryption)
- ✅ Security best practices observed

## Output

Provide specific file references and actionable remediation steps.

Use the Well-Architected Agent with security pillar deep dive scope.