sk Skill · ShieldNet-360
secure-code-review
The sinks and boundaries that belong to no framework: passing input to a shell or an evaluator, letting input choose a filesystem path, validating at a boundary that is not an HTTP request, and handling regulated data (PII, PHI, cardholder data) so it does not spread into paths nobody reviews. Use when generating or reviewing code that shells out, touches the filesystem, reads a queue message, CLI argument, or…
Open on skills.sh ↗read 2026-09-17
- installs 8w
- 0
- 30-day movement
- starts with the next reading
- Related entries
- 4
- Connections
- 0
Goprevention
- Host repository
- ShieldNet-360/secure-vibe
- Category
- prevention
- Version
- 2.0.0
- Compatible with
- when generating or reviewing code that executes a command or evaluates a string, when code builds a filesystem path from input, when validating input that did not arrive as an HTTP request — CLI, queue, env, file, when a change touches PII, PHI, or cardholder data
- Host stars
- 22
- Host language
- Go