first commit

文档润色流和知识库构建流/claude-scholar/skills/code-review-excellence/references/security-review-guide.md

@@ -0,0 +1,12 @@
+# Security Review Guide
+
+## Check for
+- unsanitized input,
+- SQL or shell injection,
+- insecure deserialization,
+- secret leakage,
+- missing authz checks,
+- unsafe filesystem or network defaults.
+
+## Review note pattern
+`Blocking: this path accepts untrusted input and passes it to X without validation.`