Does it provide blockchain-specific security?

Yes, it includes specialized verification patterns for Solana wallet ownership and transaction validation to prevent common Web3 exploits.

How does this skill help with SQL injection?

It identifies risky string concatenations in database queries and provides templates for using parameterized queries and ORMs to safely handle user input.

How does it handle input validation?

It promotes a whitelist-based validation approach using schema libraries like Zod to ensure all incoming data meets strict type and format requirements.

Does it support modern frameworks like Supabase?

Yes, it includes specific guidance for implementing Supabase Row Level Security (RLS) and secure authentication patterns.

Can it detect hardcoded secrets?

The skill provides a strict checklist and verification steps to ensure API keys, tokens, and passwords are moved to environment variables and kept out of git history.

Security Review & Best Practices

Name: Security Review & Best Practices
Author: sc30gsw

bysc30gsw

•

보안 및 테스팅

Audits code for vulnerabilities and implements industry-standard security patterns for authentication, data handling, and API protection.

The Security Review skill empowers developers to build resilient applications by providing real-time guidance on critical security domains, including secrets management, input validation with Zod, and SQL injection prevention. It offers actionable checklists and code snippets for implementing secure authentication flows, protecting against XSS/CSRF attacks, and enforcing rate limiting. By integrating these patterns directly into the development workflow, it ensures every pull request or feature implementation adheres to OWASP standards and modern security best practices, significantly reducing the surface area for potential exploits.

주요 기능

01Comprehensive security checklists for pre-deployment audits

02Specialized security modules for blockchain transactions and dependency management

038 GitHub stars

04Secure coding patterns for Zod validation and parameterized SQL queries

05Automated protection patterns for XSS, CSRF, and sensitive data exposure

06Authentication and authorization guidance including JWT and Supabase RLS

사용 사례

01Implementing secure file upload systems with rigorous type and size validation

02Reviewing new API endpoints and authentication logic for common vulnerabilities

03Hardening production applications against OWASP Top 10 threats like SQL injection and XSS

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sc30gsw/claude-code-customes security-review

For use in Claude.ai and ChatGPT

Download Skill