What does the Security Review skill do?

It provides Claude with specialized checklists and code patterns to ensure your application follows industry-standard security practices and defensive programming.

How does it handle input validation?

It implements schema-based validation using Zod and whitelist-based filtering to ensure all user data and file uploads are sanitized and type-safe.

Can it detect hardcoded secrets?

Yes, it actively monitors for hardcoded API keys and credentials in source code, providing immediate patterns for environment variable migration.

Does it support specific frameworks?

Yes, it includes optimized patterns for Next.js, Express, Supabase, and Solana blockchain development, covering everything from RLS to wallet verification.

Is it suitable for blockchain development?

Absolutely. It includes a dedicated section for Solana security, focusing on wallet ownership verification, transaction integrity, and balance checks.

Security Review

Name: Security Review
Author: oabdelmaksoud

byoabdelmaksoud

0•

보안 및 테스팅

Conducts comprehensive security audits and implements defensive coding patterns to protect applications from common vulnerabilities.

The Security Review skill is a specialized agent enhancement designed to enforce rigorous security standards throughout the software development lifecycle. It provides automated checklists and implementation patterns for critical security domains including authentication, secrets management, input validation, and database safety. By integrating OWASP best practices and framework-specific patterns for Next.js, Supabase, and Solana, this skill ensures that developers identify and mitigate potential vulnerabilities like SQL injection and XSS before code deployment.

주요 기능

01Automated secrets management and environment variable validation

02Advanced authentication flows, JWT handling, and Supabase Row Level Security (RLS)

03Solana-specific blockchain security including wallet and transaction verification

04Zod-based input validation and file upload restriction patterns

05SQL injection prevention using parameterized queries and ORM best practices

060 GitHub stars

사용 사례

01Hardening blockchain applications with Solana wallet signature verification

02Auditing new API endpoints for potential injection or authentication flaws

03Implementing secure payment processing and sensitive data handling

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/superclaw security-review

For use in Claude.ai and ChatGPT

주요 기능

01Automated secrets management and environment variable validation

02Advanced authentication flows, JWT handling, and Supabase Row Level Security (RLS)

03Solana-specific blockchain security including wallet and transaction verification

04Zod-based input validation and file upload restriction patterns

05SQL injection prevention using parameterized queries and ORM best practices

060 GitHub stars

사용 사례

01Hardening blockchain applications with Solana wallet signature verification

02Auditing new API endpoints for potential injection or authentication flaws

03Implementing secure payment processing and sensitive data handling

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/superclaw security-review

For use in Claude.ai and ChatGPT