Is this skill compatible with Supabase and Next.js?

Yes, it includes specific security guidance for Next.js middleware, Content Security Policy (CSP) headers, and Supabase Row Level Security (RLS) policies.

How does it improve secrets management?

It enforces strict patterns for using environment variables, ensuring that API keys, database passwords, and tokens are never hardcoded or committed to version control.

What common vulnerabilities does this skill help identify?

The skill provides checklists and patterns to identify and prevent SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and insecure secrets management.

Does this skill support specific validation libraries?

Yes, it provides optimized implementation patterns for Zod, enabling robust schema-based validation for user inputs and API requests.

Can I use this for blockchain and Web3 security?

Absolutely. It includes specialized modules for Solana blockchain security, focusing on wallet ownership verification and transaction validation.

Security Review & Audit

Name: Security Review & Audit
Author: affaan-m

byaffaan-m

•

34,604

•

보안 및 테스팅

Performs comprehensive security audits and implements robust defensive patterns to protect applications from common vulnerabilities and data leaks.

This skill transforms Claude into a security-conscious engineer by providing a rigorous framework for auditing code and implementing defensive best practices. It covers critical security domains including secrets management, schema-based input validation with Zod, SQL injection prevention, and secure authentication flows using httpOnly cookies. Whether you are building REST APIs, managing sensitive user data, or developing blockchain transactions on Solana, this skill ensures your implementation adheres to industry standards like the OWASP Top 10, preventing Cross-Site Scripting (XSS), CSRF, and accidental exposure of sensitive information.

주요 기능

01Secure implementation patterns for environment variables and secrets management

02Defensive coding templates for SQL injection, XSS, and CSRF prevention

03Specialized blockchain security protocols for Solana wallet and transaction verification

04API rate limiting and secure error handling to prevent data exposure

0534,604 GitHub stars

06Automated security checklists for authentication, authorization, and input handling

사용 사례

01Implementing secure user authentication and Row Level Security (RLS) for database access

02Auditing new API endpoints for injection vulnerabilities and authorization flaws before production

03Securing file upload systems with robust size, type, and extension validation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code security-review

For use in Claude.ai and ChatGPT

Download Skill