Can this skill help prevent SQL injection?

Yes, it provides specific guidance and code examples for using parameterized queries and ORM sanitization to prevent SQL injection attacks.

What does the Security Review skill do?

It provides Claude with specialized patterns and checklists to identify potential vulnerabilities and implement industry-standard security best practices during the development process.

How does it handle input validation?

It promotes schema-based validation using tools like Zod and provides strict patterns for validating file uploads by size, type, and extension.

Does it support blockchain security?

The skill includes specialized patterns for Solana development, including wallet ownership verification and transaction detail validation.

When should I activate this skill?

Activate this skill whenever you are implementing authentication, handling user input, working with secrets, creating API endpoints, or handling payments.

Security Review Assistant

Name: Security Review Assistant
Author: claudiodearaujo

byclaudiodearaujo

セキュリティとテスト

Conducts comprehensive security audits and implements defensive coding patterns for web applications, APIs, and smart contract integrations.

概要

This skill empowers Claude to act as a security-focused pair programmer by providing standardized checklists and production-ready code patterns for critical application areas. It guides the implementation of secure authentication, robust input validation using Zod, and protection against common vulnerabilities like SQL injection, XSS, and CSRF. Whether you are handling sensitive user data, integrating Solana blockchain wallets, or preparing for a production deployment, this skill ensures your codebase follows industry-standard security best practices and maintains a strong defensive posture.

主な機能

Hardened secrets management and environment variable enforcement
0 GitHub stars
Blockchain-specific security for Solana wallet and transaction verification
Secure authentication flows using httpOnly cookies and Row Level Security (RLS)
Schema-based input validation and restricted file upload patterns
Automated security testing templates for rate limiting and authorization

ユースケース

Hardening API endpoints against SQL injection and cross-site scripting (XSS) attacks
Performing pre-deployment security audits to identify hardcoded secrets and logic flaws
Implementing secure payment processing and sensitive data handling in modern web apps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cc-skill-security-review

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要