Can it help with frontend vulnerabilities like XSS?

Absolutely. It includes patterns for sanitizing HTML with DOMPurify and configuring Content Security Policy (CSP) headers in frameworks like Next.js.

Does it support blockchain or Web3 security?

Yes, it includes specific validation steps for Solana wallet ownership verification and transaction integrity to prevent common Web3 exploits.

Does this skill provide actual code examples?

Yes, it provides both 'Do' and 'Don't' code snippets for TypeScript, SQL, and configuration files to illustrate secure vs. insecure implementation patterns.

When should I activate the Security Review skill?

Activate this skill whenever you are implementing authentication, handling user-submitted files, creating new API endpoints, or managing sensitive credentials and secrets.

Security Review Expert

Name: Security Review Expert
Author: affaan-m

byaffaan-m

•

112,914

•

보안 및 테스팅

Performs comprehensive security audits and provides implementation patterns for authentication, data handling, and API protection.

The Security Review skill is a specialized capability for Claude Code designed to ensure code adheres to industry-standard security best practices. It provides developers with actionable checklists and code patterns for critical areas such as secret management, Zod-based input validation, and SQL injection prevention. By integrating this skill, developers can proactively identify vulnerabilities, implement robust authorization layers like Row Level Security, and secure sensitive operations including payments and blockchain transactions, ensuring a 'security-first' approach to software development.

주요 기능

01Production-ready patterns for Zod validation and SQL injection prevention.

02Specialized validation logic for Solana blockchain transactions and wallet signatures.

03112,914 GitHub stars

04Security strategies for XSS/CSRF protection and Content Security Policies.

05Automated guidance for secret management and environment variable safety.

06Comprehensive security checklists for API endpoints and authentication workflows.

사용 사례

01Auditing new API endpoints and database queries for potential injection risks.

02Implementing secure authentication systems using httpOnly cookies and JWT.

03Validating user-uploaded files and sensitive data inputs to prevent remote exploits.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add affaan-m/everything-claude-code security-review

For use in Claude.ai and ChatGPT

주요 기능

01Production-ready patterns for Zod validation and SQL injection prevention.

02Specialized validation logic for Solana blockchain transactions and wallet signatures.

03112,914 GitHub stars

04Security strategies for XSS/CSRF protection and Content Security Policies.

05Automated guidance for secret management and environment variable safety.

06Comprehensive security checklists for API endpoints and authentication workflows.

사용 사례

01Auditing new API endpoints and database queries for potential injection risks.

02Implementing secure authentication systems using httpOnly cookies and JWT.

03Validating user-uploaded files and sensitive data inputs to prevent remote exploits.