How does this skill help with secret management?

It enforces patterns that prevent hardcoding API keys or passwords, guiding you to use environment variables and .gitignore files properly while verifying they exist at runtime.

Can it detect SQL injection vulnerabilities?

Yes, it identifies dangerous string concatenation in database queries and provides specific code patterns for safe, parameterized queries using ORMs or raw SQL.

Is this skill compatible with Supabase?

Yes, it includes specialized guidance for implementing Row Level Security (RLS) policies and managing secure authentication within the Supabase ecosystem.

How does it handle XSS and CSRF protection?

The skill provides patterns for sanitizing HTML with DOMPurify, configuring Content Security Policies (CSP), and implementing CSRF tokens and SameSite cookie attributes.

Does it support blockchain-specific security?

Specifically for Solana, it includes validation patterns for wallet signatures and transaction details to prevent unauthorized actions and blind signing.

Security Review & Audit

Name: Security Review & Audit
Author: Nixdorfer

byNixdorfer

•

セキュリティとテスト

Performs comprehensive security audits and enforces best practices for authentication, input validation, and sensitive data handling.

This skill empowers Claude to act as a security-conscious lead developer by providing a rigorous framework for identifying vulnerabilities and implementing secure coding patterns. It covers critical areas such as secret management, SQL injection prevention, cross-site scripting (XSS) mitigation, and rate limiting. Whether you are building a new API endpoint, integrating payment systems, or managing Solana blockchain transactions, this skill ensures your code adheres to industry-standard security protocols like OWASP, reducing the risk of data breaches and unauthorized access.

主な機能

01Automated security checklists for authentication and authorization workflows

02Pattern-based detection of hardcoded secrets and insecure credential storage

031 GitHub stars

04Advanced protection patterns against SQL Injection, XSS, and CSRF attacks

05Domain-specific security guidance for Solana blockchain and Supabase RLS

06Rigorous input validation templates using Zod and whitelist-based filtering

ユースケース

01Validating complex user inputs and file uploads to prevent malicious injections or overflows

02Implementing secure authentication systems with httpOnly cookies and Row Level Security

03Auditing existing codebases for potential security vulnerabilities before production deployment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nixdorfer/claudecodetool security-review

For use in Claude.ai and ChatGPT

Download Skill