How does it handle secret management?

It provides a strict checklist to ensure API keys and passwords are never hardcoded, helping you move secrets to environment variables and .gitignore files.

When should I activate the security-review skill?

Activate this skill whenever you are implementing authentication, handling user input, creating new API endpoints, managing secrets, or processing payments.

Is it compatible with Supabase and Next.js?

Yes, it includes specific best practices for Supabase Row Level Security (RLS) and Next.js security headers like Content Security Policy (CSP).

Can it assist with blockchain security?

The skill includes specialized checks for Solana development, such as verifying wallet ownership signatures and validating transaction details before submission.

Does this skill help with SQL injection and XSS?

Yes, it provides specific code patterns for parameterized queries to prevent SQL injection and sanitization techniques to block Cross-Site Scripting (XSS) attacks.

Security Review & Best Practices

Name: Security Review & Best Practices
Author: affaan-m

byaffaan-m

•

156,033

•

セキュリティとテスト

Enforces robust application security by providing checklists and implementation patterns for authentication, input validation, and secret management.

The Security Review skill is a comprehensive guardrail designed to ensure all code follows industry-standard security protocols. It guides developers through critical tasks such as preventing SQL injection and XSS, managing sensitive environment variables, and implementing secure authentication flows. By providing domain-specific guidance for various technologies—including Next.js, Supabase, and Solana—it helps identify potential vulnerabilities early in the development lifecycle and ensures that sensitive data, payments, and API endpoints remain protected.

主な機能

01Secure patterns for secret management and environment variables

02Defense mechanisms against SQLi, XSS, CSRF, and rate-limit abuse

03Comprehensive security checklists for API and endpoint creation

04Blockchain-specific security for Solana wallet and transaction verification

05156,033 GitHub stars

06Validation strategies for user inputs and file uploads using Zod

ユースケース

01Implementing secure authentication and Role-Based Access Control (RBAC)

02Auditing code for hardcoded secrets and sensitive data exposure

03Hardening public-facing API endpoints against common web vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code security-review

For use in Claude.ai and ChatGPT

主な機能

01Secure patterns for secret management and environment variables

02Defense mechanisms against SQLi, XSS, CSRF, and rate-limit abuse

03Comprehensive security checklists for API and endpoint creation

04Blockchain-specific security for Solana wallet and transaction verification

05156,033 GitHub stars

06Validation strategies for user inputs and file uploads using Zod

ユースケース

01Implementing secure authentication and Role-Based Access Control (RBAC)

02Auditing code for hardcoded secrets and sensitive data exposure

03Hardening public-facing API endpoints against common web vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code security-review

For use in Claude.ai and ChatGPT