Does this skill work with specific frameworks?

Yes, it includes specific implementation patterns for Next.js, Supabase, Zod validation, and Solana blockchain development.

When should I activate the Security Review skill?

You should activate it whenever you are building authentication systems, handling user input, creating API endpoints, or working with financial/sensitive data.

Does it protect against the OWASP Top 10?

Yes, it provides specific guidance to mitigate common risks like SQL Injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF).

Can it help prevent hardcoded API keys?

Absolutely. It includes strict rules and verification steps to ensure all secrets are managed via environment variables and never committed to source control.

What is the primary purpose of the Security Review skill?

The skill provides Claude with domain-specific knowledge to audit code for vulnerabilities and enforce security best practices during the development of sensitive features.

Security Audit & Best Practices

Name: Security Audit & Best Practices
Author: x-cmd

byx-cmd

•

보안 및 테스팅

Implements rigorous security audits and best practices for web applications, APIs, and sensitive data handling.

The Security Review skill acts as an automated security consultant for Claude, providing comprehensive checklists and implementation patterns to safeguard your codebase. It ensures developers follow industry-standard practices for secrets management, input validation, and authentication while actively identifying vulnerabilities like SQL injection, XSS, and CSRF. Whether you are building a Next.js application, integrating Supabase, or developing Solana blockchain transactions, this skill provides the necessary guardrails to ensure your code is production-ready and secure.

주요 기능

01Robust input validation and file upload verification using Zod

02Comprehensive pre-deployment security checklists and verification steps

039 GitHub stars

04Specialized security patterns for Supabase RLS and Solana blockchain

05Secure secrets management patterns to prevent credential leaks

06Prevention strategies for common vulnerabilities like SQLi, XSS, and CSRF

사용 사례

01Validating user-provided content and file uploads to prevent injections

02Auditing new API endpoints for proper authorization and rate limiting

03Implementing secure user authentication flows with httpOnly cookies

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add x-cmd/skill security-review

For use in Claude.ai and ChatGPT

Download Skill