Does this skill support blockchain security?

Yes, it includes specialized modules for Solana, focusing on wallet signature verification and transaction validation logic.

What common vulnerabilities does this skill help prevent?

It provides specific code patterns and checklists to mitigate the OWASP Top 10, including SQL injection, XSS, CSRF, and broken access control.

How does it handle sensitive API keys and secrets?

The skill enforces strict rules against hardcoding secrets, providing templates for environment variable management and secure deployment configurations.

Can it help with database-specific security?

Absolutely. It covers parameterized queries for SQL and Row Level Security (RLS) implementation specifically for Supabase environments.

Security Review & Audit

Name: Security Review & Audit
Author: AmbushData

byAmbushData

セキュリティとテスト

Implements rigorous security checklists and industry-standard patterns to protect applications from vulnerabilities, data leaks, and unauthorized access.

概要

The Security Review skill acts as an automated security architect for your development workflow, providing comprehensive guidance on safeguarding sensitive features. It enforces best practices for authentication, secrets management, and input validation while offering specialized patterns for SQL injection prevention, XSS mitigation, and CSRF protection. Whether you are building API endpoints, handling complex payment flows, or working with Supabase and Solana, this skill ensures your code meets modern security standards and passes a pre-deployment audit before reaching production.

主な機能

0 GitHub stars
Advanced protection against SQL injection, XSS, and CSRF attacks.
Comprehensive security checklists for authentication, authorization, and secrets management.
Robust input validation patterns using Zod and secure file upload strategies.
Specialized security protocols for Solana blockchain transactions and wallet verification.
Rate limiting and sensitive data redaction patterns for logging and error handling.

ユースケース

Hardening API endpoints and backend services against common OWASP Top 10 vulnerabilities.
Implementing secure payment processing and sensitive user data storage workflows.
Conducting automated pre-deployment security audits for Next.js, Supabase, and Solana projects.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ambushdata/ai_setup security-review

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要

主な機能

0 GitHub stars
Advanced protection against SQL injection, XSS, and CSRF attacks.
Comprehensive security checklists for authentication, authorization, and secrets management.
Robust input validation patterns using Zod and secure file upload strategies.
Specialized security protocols for Solana blockchain transactions and wallet verification.
Rate limiting and sensitive data redaction patterns for logging and error handling.

ユースケース

Hardening API endpoints and backend services against common OWASP Top 10 vulnerabilities.
Implementing secure payment processing and sensitive user data storage workflows.
Conducting automated pre-deployment security audits for Next.js, Supabase, and Solana projects.