Does it support blockchain development security?

Yes, it includes specialized verification steps for Solana wallet ownership and transaction validation to ensure secure interactions in decentralized applications.

When should I activate the Security Review skill?

You should activate this skill whenever you are implementing authentication, handling user input, creating API endpoints, working with secrets, or preparing for a production deployment.

Can this skill help with database security?

Yes, it provides specific patterns for parameterized queries to prevent SQL injection and guides developers on implementing Row Level Security (RLS) for databases like Supabase.

How does the Security Review skill prevent data leaks?

It enforces strict secrets management protocols, ensuring that API keys, tokens, and credentials are never hardcoded in source code and are always managed via environment variables and secure hosting platforms.

Security Review & Audit

Name: Security Review & Audit
Author: WorldFlowAI

byWorldFlowAI

보안 및 테스팅

Enforces application safety by applying comprehensive security checklists and implementation patterns for authentication, data validation, and secrets management.

소개

The Security Review skill provides a robust framework for securing AI-assisted development projects by enforcing industry-standard best practices across critical areas like authentication, authorization, and input validation. It guides Claude to proactively identify vulnerabilities such as hardcoded secrets or SQL injection risks while providing production-ready code patterns for JWT handling, Row Level Security, and Content Security Policies. Whether you are building financial systems, handling sensitive user data, or integrating blockchain wallets, this skill acts as an automated security auditor to ensure your codebase remains resilient against common OWASP threats and deployment risks.

주요 기능

0 GitHub stars
Advanced protection strategies for XSS, CSRF, and API rate limiting
Comprehensive secrets management protocols to prevent credential leaks
Specialized blockchain security checks for Solana wallet and transaction verification
Schema-based input validation patterns using Zod and file upload restrictions
Parameterized query enforcement to eliminate SQL injection vulnerabilities

사용 사례

Implementing safe handling for user-generated content and third-party integrations
Securing new API endpoints and authentication workflows during development
Conducting a pre-deployment security audit of sensitive payment or data features

소개

주요 기능

0 GitHub stars
Advanced protection strategies for XSS, CSRF, and API rate limiting
Comprehensive secrets management protocols to prevent credential leaks
Specialized blockchain security checks for Solana wallet and transaction verification
Schema-based input validation patterns using Zod and file upload restrictions
Parameterized query enforcement to eliminate SQL injection vulnerabilities

사용 사례

Implementing safe handling for user-generated content and third-party integrations
Securing new API endpoints and authentication workflows during development
Conducting a pre-deployment security audit of sensitive payment or data features