How does it handle sensitive credentials?

The skill provides a 'Never Do' list for hardcoded secrets and guides users toward secure environment variable management and .gitignore best practices.

Does it support modern input validation libraries?

It provides built-in patterns for Zod to ensure all user data is strictly typed and validated before it reaches your application logic.

Can it help with blockchain security?

Yes, it includes specific patterns for Solana wallet verification and transaction validation to prevent common Web3 vulnerabilities like blind signing.

How does this skill prevent SQL injection?

It enforces the use of parameterized queries and ORM best practices, strictly prohibiting dangerous string concatenation in database calls.

Security Review Pro

Name: Security Review Pro
Author: unju-ai

byunju-ai

0•

セキュリティとテスト

Enforces industry-standard security best practices through comprehensive checklists and code patterns for authentication, input validation, and data protection.

The Security Review skill empowers Claude to act as a virtual security engineer, enforcing rigorous protections across the entire development lifecycle. It provides automated checklists and production-ready code patterns for critical areas including secrets management, input validation with Zod, SQL injection prevention, and secure authentication flows. Whether you are building a Next.js application, managing Supabase Row Level Security, or implementing Solana blockchain transactions, this skill ensures your code remains resilient against common vulnerabilities and OWASP Top 10 threats.

主な機能

01Hardened secrets management workflows to prevent credential leakage in source control.

02Specialized security verification for Solana blockchain interactions and wallet signatures.

030 GitHub stars

04Comprehensive protection guides for SQL injection, XSS, and CSRF vulnerabilities.

05Automated security checklists for authentication, authorization, and API design.

06Standardized input validation patterns using Zod and secure file upload constraints.

ユースケース

01Hardening database layers with parameterized queries and Supabase Row Level Security (RLS).

02Auditing new API endpoints for rate limiting and sensitive data exposure before deployment.

03Implementing secure authentication systems using httpOnly cookies and JWT best practices.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc security-review

For use in Claude.ai and ChatGPT