Can I use this skill for blockchain or Web3 projects?

Absolutely. It contains dedicated checks for Solana, including wallet ownership verification and transaction integrity checks.

Is this a replacement for a manual security audit?

While it significantly reduces common errors and enforces best practices during development, it is designed to complement—not replace—professional security reviews and penetration testing.

Does this skill work with specific databases like Supabase?

Yes, it includes specific patterns for Supabase, including Row Level Security (RLS) configuration and secure query parameters.

How does it help with input validation?

The skill provides implementation patterns for Zod-based schema validation to ensure all user-provided data is strictly typed and sanitized before processing.

What types of vulnerabilities does the Security Review skill detect?

It identifies a wide range of common threats including SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), hardcoded API keys, and insecure authentication patterns.

Security Review Auditor

Name: Security Review Auditor
Author: Aventerica89

byAventerica89

보안 및 테스팅

Audits source code for vulnerabilities and enforces industry-standard security patterns across authentication, data handling, and API development.

소개

The Security Review skill acts as an automated security architect for Claude, providing comprehensive checklists and implementation patterns to safeguard applications throughout the development lifecycle. It specialized in identifying critical risks such as hardcoded secrets, SQL injection, and XSS, while enforcing robust best practices for authentication, authorization, and rate limiting. By integrating directly into the AI coding workflow, it ensures that features involving sensitive data, payment processing, or blockchain transactions meet modern security compliance standards before reaching production.

주요 기능

Detailed authentication and authorization checks, including Supabase Row Level Security (RLS).
Comprehensive vulnerability detection for SQL injection, XSS, and CSRF vulnerabilities.
Specialized blockchain security modules for Solana wallet and transaction verification.
Schema-based input validation patterns using Zod for robust data sanitization.
Automated secrets management auditing to prevent hardcoded credentials in source code.
0 GitHub stars

사용 사례

Hardening user input handling and file upload logic against malicious injections.
Performing a pre-deployment security audit on new API endpoints and authentication flows.
Securing sensitive data transmission and storage in web and blockchain-based applications.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add aventerica89/bricks-builder-agent security-review

For use in Claude.ai and ChatGPT

Download Skill

GitHub

소개