# Security Review · xu-xiang

> 当涉及添加身份验证（Authentication）、处理用户输入、操作机密（Secrets）、创建 API 终端节点或实现支付/敏感功能时，请使用此技能。提供全面的安全检查清单和模式。

## Facts
- Page: https://tashan.sh/capability/skill-xu-xiang-security-review
- tashan id: skill:xu-xiang/security-review
- Source: https://github.com/xu-xiang/everything-claude-code-zh
- Type: skill
- Category: security
- tashan score: 38.0 / 100
- Adoption: 20.0
- Upkeep: 79.0
- Freshness: 54.0
- Evidence coverage: 84% of the inputs this score can use
- Health: active
- Instruction depth: not yet graded
- License: MIT
- Official: no

## Install

```sh
cp -r security-review ~/.claude/skills/
```

## Security audit
Not scanned. We audit npm-published capabilities; this one has no npm package we can resolve, or has not reached the queue. This is not a clean bill of health.

---
Measured 2026-08-20 by tashan (https://tashan.sh) from public evidence. Scorer s5.