Is it useful for blockchain developers?

Yes, it contains a dedicated section for Solana security, covering wallet signature verification, transaction validation, and balance checks.

Can it help with frontend security?

Yes, it includes patterns for DOMPurify sanitization to prevent XSS and provides Content Security Policy (CSP) configurations to protect your web application.

Does this skill support database security?

Absolutely. It focuses on parameterized queries and ORM usage to prevent SQL injection, and specifically includes Row Level Security (RLS) patterns for Supabase.

How does this skill help prevent data leaks?

It provides strict guidelines for secret management, ensuring API keys and passwords are never hard-coded and are instead managed via environment variables and secure hosting platforms.

Security Review Checklist

Name: Security Review Checklist
Author: unju-ai

byunju-ai

0•

セキュリティとテスト

Performs comprehensive security audits and provides implementation patterns to protect applications from vulnerabilities like SQL injection, XSS, and broken authentication.

The Security Review skill serves as a specialized security auditor within Claude Code, ensuring that your codebase adheres to industry-standard security best practices. It provides actionable checklists and code patterns for critical areas including secret management, input validation via Zod, CSRF/XSS protection, and rate limiting. Whether you are building REST APIs, handling sensitive financial data, or developing blockchain applications on Solana, this skill helps identify potential risks and implements robust defenses before deployment.

主な機能

01Parameterized query patterns to eliminate SQL injection risks

020 GitHub stars

03Comprehensive checklists for OWASP Top 10 vulnerability mitigation

04Schema-based input validation and file upload sanitization logic

05Secure secret management and environment variable enforcement patterns

06Specialized blockchain security checks for Solana wallet and transaction verification

ユースケース

01Auditing new API endpoints for proper authentication, authorization, and rate limiting

02Securing sensitive user data handling and payment processing workflows

03Refactoring legacy code to implement modern security headers and CSRF protections

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc security-review

For use in Claude.ai and ChatGPT