BZJZ_Material/文档润色流和知识库构建流/claude-scholar/skills/code-review-excellence/references/security-review-guide.md

# Security Review Guide

## Check for
- unsanitized input,
- SQL or shell injection,
- insecure deserialization,
- secret leakage,
- missing authz checks,
- unsafe filesystem or network defaults.

## Review note pattern
`Blocking: this path accepts untrusted input and passes it to X without validation.`