How does this skill handle secrets management?

It enforces strict rules against hardcoding credentials, providing checklists to ensure all secrets are managed via environment variables and excluded from version control.

Can it help with input validation?

Absolutely. It provides standardized implementation patterns using libraries like Zod to ensure all user input is strictly typed and validated before processing.

What common vulnerabilities does this skill address?

The skill provides comprehensive coverage for the OWASP Top 10, specifically addressing SQL injection, Cross-Site Scripting (XSS), CSRF, insecure authentication, and sensitive data exposure.

Does it support blockchain or Web3 security?

Yes, it includes specialized patterns for the Solana network, such as wallet ownership verification and transaction validation to prevent common smart contract exploits.

Security Review

Name: Security Review
Author: affaan-m

byaffaan-m

•

112,919

•

セキュリティとテスト

Conducts comprehensive security audits and implements defensive coding patterns to protect applications from vulnerabilities and data exposure.

The Security Review skill provides a robust framework for identifying vulnerabilities and enforcing security best practices across the entire development lifecycle. It equips Claude with detailed checklists and implementation patterns for critical areas including secrets management, input validation with Zod, SQL injection prevention, and secure authentication flows. By following industry-standard protocols like the OWASP Top 10, this skill helps developers secure API endpoints, manage sensitive data exposure, and even verify blockchain transactions on the Solana network, ensuring production-grade safety from the first line of code.

主な機能

01Defensive coding implementations for XSS, CSRF, and SQL injection prevention

02Specialized security checks for Solana blockchain wallet and transaction verification

03Secure authentication and authorization guidance including JWT and Row Level Security

04Comprehensive security checklists covering OWASP Top 10 vulnerabilities

05Automated patterns for input validation and schema enforcement using Zod

06112,919 GitHub stars

ユースケース

01Auditing existing codebases for hardcoded secrets and insecure API endpoints

02Implementing secure authentication systems with Row Level Security in Supabase

03Validating user-uploaded files and sanitizing dynamic HTML content to prevent XSS

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code security-review

For use in Claude.ai and ChatGPT

主な機能

01Defensive coding implementations for XSS, CSRF, and SQL injection prevention

02Specialized security checks for Solana blockchain wallet and transaction verification

03Secure authentication and authorization guidance including JWT and Row Level Security

04Comprehensive security checklists covering OWASP Top 10 vulnerabilities

05Automated patterns for input validation and schema enforcement using Zod

06112,919 GitHub stars

ユースケース

01Auditing existing codebases for hardcoded secrets and insecure API endpoints

02Implementing secure authentication systems with Row Level Security in Supabase

03Validating user-uploaded files and sanitizing dynamic HTML content to prevent XSS