When to use this
- Before shipping any user-facing feature that handles auth, payments, or file uploads
- When you want a fast OWASP Top 10 pass without a full dedicated security review
- When adding new API endpoints and need to confirm input validation and auth checks are in place
How to use
-
Open the template on GitHub and copy its content:
skills/security-checklist.md -
Place the file inside
.claude/skills/in your project (or globally in~/.claude/to share across all projects). - Edit the Markdown content to match your project conventions, team constraints, and specific context.