Does this skill provide guidance for blockchain applications?

Yes, it includes specific security patterns for Solana, such as wallet ownership verification and transaction validation.

Can I use this for database security audits?

Absolutely. It provides specific instructions for parameterized queries and implementing Row Level Security (RLS) in databases like Supabase.

What core security issues does this Claude Code skill address?

This skill addresses common vulnerabilities including hardcoded secrets, SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and insecure authentication patterns.

How does it help with user input validation?

It advocates for and provides implementation patterns using Zod for schema-based validation and DOMPurify for HTML sanitization to prevent malicious injections.

Security Review

Name: Security Review
Author: saar120

bysaar120

0•

セキュリティとテスト

Performs comprehensive security audits and implements defense-in-depth patterns for authentication, data handling, and API development.

The Security Review skill serves as a specialized security co-pilot for Claude, providing an exhaustive framework to identify vulnerabilities and implement industry-standard best practices. It covers critical security domains including secret management, input validation, SQL injection prevention, and advanced web protections like XSS and CSRF mitigation. By integrating specific checklists and proven code patterns for modern stacks like Supabase and Solana, this skill ensures that security is a core component of the development process, helping developers build resilient applications that protect sensitive user data.

主な機能

01Strategies for API rate limiting and preventing sensitive data leakage

02Automated validation schemas using Zod for robust input sanitization

030 GitHub stars

04Comprehensive security checklists for production-ready code deployments

05Best-practice patterns for secure authentication and JWT handling

06Domain-specific security guidance for Solana blockchain and Supabase RLS

ユースケース

01Implementing secure user authentication and role-based access control systems

02Setting up comprehensive API protection including CSRF tokens and rate limiting

03Auditing codebases for hardcoded secrets and unparameterized database queries

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add saar120/skillgate-registry security-review

For use in Claude.ai and ChatGPT

主な機能

01Strategies for API rate limiting and preventing sensitive data leakage

02Automated validation schemas using Zod for robust input sanitization

030 GitHub stars

04Comprehensive security checklists for production-ready code deployments

05Best-practice patterns for secure authentication and JWT handling

06Domain-specific security guidance for Solana blockchain and Supabase RLS

ユースケース

01Implementing secure user authentication and role-based access control systems

02Setting up comprehensive API protection including CSRF tokens and rate limiting

03Auditing codebases for hardcoded secrets and unparameterized database queries