---
title: "Secure Code Review Checklist - Air Market"
description: "Some code sits where mistakes turn into security problems: anything touching user input, logins, files, the network, or a database. This goes through that code looking for the usual weaknesses before…"
canonical: "https://airmarket.ai/app/secure-code-review"
---

[Air Market](/) / [Security](/category/security) / Secure Code Review Checklist

Skill by [AIMING Lab](/@aiming-lab)

# Secure Code Review Checklist

Check the risky parts before you call the code done

## What this does

Some code sits where mistakes turn into security problems: anything touching user input, logins, files, the network, or a database. This goes through that code looking for the usual weaknesses before you consider it finished. Reach for it while writing that code, or when reviewing someone else's.

### Top 3 things it does for you

- Review code that handles user input
- Look for common vulnerabilities before signing off
- Go over auth, file, and database code

## Information

**Secure Code Review Checklist at a glance**

|  |  |
| --- | --- |
| Kind | Skill |
| Publisher | [AIMING Lab](/@aiming-lab) |
| Category | [Security](/category/security) |
| Works with | Agent Skills - an open standard supported by 40+ agents |
| Size | 996 bytes |
| Licence | MIT |
| Repository | [aiming-lab/MetaClaw](https://github.com/aiming-lab/MetaClaw/tree/fc163ba8a12ba5e6950544c3e0d55707c16e2a7e/memory_data/skills/secure-code-review) |
| GitHub stars | 3,496 (as of Nov 2026) |

## Security report

**Verified.** AIR scanned this exact version of Secure Code Review Checklist and flagged nothing. AIR's verdict: **safe**.

**What Secure Code Review Checklist's check was run against**

|  |  |
| --- | --- |
| Commit | fc163ba8a12ba5e6950544c3e0d55707c16e2a7e |
| Content hash | 57dff17e0518522b6ac215b1008836fe9b374d55d0f4ad6f7a4540e67e3f18e1 |
| Files read | [Browse the files at this exact commit](https://github.com/aiming-lab/MetaClaw/blob/fc163ba8a12ba5e6950544c3e0d55707c16e2a7e/memory_data/skills/secure-code-review/SKILL.md) |

A scan is named by the exact content it read, not by a version number. A different version is a different artifact, and nothing here applies to a version AIR has not scanned.

[Read the full security report for Secure Code Review Checklist](/security/secure-code-review)

## About Secure Code Review Checklist

This is for reviewing or writing code in the sensitive spots: user input, authentication, file input and output, network requests, and database queries.

Common security vulnerabilities are checked for before the code is treated as complete.

## What's inside

- SKILL.md - instructions

## Questions

### Is Secure Code Review Checklist safe to install?

AIR scanned this exact version of Secure Code Review Checklist and flagged nothing. AIR's verdict: safe. The verdict is named by the content that was read, at commit fc163ba8a12b, so it cannot drift onto a version nobody scanned. The full report is at https://airmarket.ai/security/secure-code-review.

### How do I install Secure Code Review Checklist?

Open https://airmarket.ai/app/secure-code-review on Air Market and use the install action: Air Market hands Claude a prompt naming this exact skill, and Claude sets it up. Source, pinned to the exact commit this listing describes: https://github.com/aiming-lab/MetaClaw/tree/fc163ba8a12ba5e6950544c3e0d55707c16e2a7e/memory_data/skills/secure-code-review. Install from that link, not the branch.

## Related on Air Market

- [More Security listings](/category/security)
- [Everything by AIMING Lab](/@aiming-lab)

---

Canonical URL: <https://airmarket.ai/app/secure-code-review>