How does this skill prevent SQL injection?

The skill provides code patterns for parameterized queries and ORM usage, explicitly flagging dangerous string concatenation in database calls.

Does it provide guidance on secret management?

Absolutely. It enforces a strict 'no-hardcoding' policy and provides instructions for managing credentials via environment variables and secure hosting platforms.

Which validation libraries does it support?

It provides ready-to-use patterns for Zod schema validation to ensure all user inputs and file uploads are strictly typed and sanitized.

Can it help with blockchain-specific security?

Yes, it includes specialized verification steps for Solana, covering wallet signature validation and transaction integrity checks.

Security Review Specialist

Name: Security Review Specialist
Author: Fabio29T

byFabio29T

0•

セキュリティとテスト

Enforces security best practices and identifies vulnerabilities through comprehensive checklists and implementation patterns.

This skill serves as a dedicated security auditor for your development workflow, providing actionable guidance on critical safety measures including authentication, secret management, and input validation. It equips developers with standardized patterns for preventing common vulnerabilities like SQL injection, XSS, and CSRF, while offering specialized security protocols for blockchain transactions and sensitive payment processing. By integrating this skill, you ensure that every API endpoint and data handling procedure follows industry-standard security models, significantly reducing the risk of data breaches and unauthorized access.

主な機能

01Best practice patterns for secret management and environment variable safety

02Specialized Solana blockchain security for wallet and transaction verification

03Multi-layered protection strategies against SQLi, XSS, and CSRF attacks

04Robust input validation templates using Zod and secure file upload logic

050 GitHub stars

06Comprehensive security checklists for authentication and authorization workflows

ユースケース

01Auditing new API endpoints for data leaks and improper authorization checks

02Implementing secure payment gateways and handling sensitive PII data

03Setting up automated security testing and dependency vulnerability scanning

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fabio29t/everything-claude security-review

For use in Claude.ai and ChatGPT

主な機能

01Best practice patterns for secret management and environment variable safety

02Specialized Solana blockchain security for wallet and transaction verification

03Multi-layered protection strategies against SQLi, XSS, and CSRF attacks

04Robust input validation templates using Zod and secure file upload logic

050 GitHub stars

06Comprehensive security checklists for authentication and authorization workflows

ユースケース

01Auditing new API endpoints for data leaks and improper authorization checks

02Implementing secure payment gateways and handling sensitive PII data

03Setting up automated security testing and dependency vulnerability scanning