Does it support modern frontend security?

Absolutely. It includes patterns for XSS protection using DOMPurify, Content Security Policy (CSP) configurations, and CSRF token implementation.

Can this skill help with database security?

Yes, it enforces the use of parameterized queries to prevent SQL injection and provides specific guidance for enabling Row Level Security (RLS) in databases like Supabase.

Is blockchain security included in this skill?

Yes, it features specialized checklists for Solana, including wallet ownership verification and transaction validation to prevent common blockchain exploits.

How does the Security Review skill help prevent data leaks?

It provides strict patterns for secret management using environment variables and ensures sensitive data like passwords or tokens are never logged or exposed in error messages.

How do I use this skill during development?

Activate it whenever you are adding authentication, handling user input, working with secrets, or creating API endpoints to receive immediate security guidance.

Security Review Specialist

Name: Security Review Specialist
Author: unju-ai

byunju-ai

0•

보안 및 테스팅

Audits and secures code by implementing industry-standard security patterns and comprehensive checklists for web applications.

The Security Review skill serves as a comprehensive automated auditor for Claude Code, focusing on eliminating vulnerabilities and enforcing security best practices. It provides deep domain expertise in managing secrets, validating user inputs with Zod, preventing SQL injection through parameterized queries, and securing authentication flows using HttpOnly cookies and Row Level Security. Whether you are building financial features, integrating third-party APIs, or preparing for a production launch, this skill ensures your codebase adheres to OWASP standards and protects against common threats like XSS, CSRF, and sensitive data leaks.

주요 기능

01Comprehensive protection strategies for SQL injection, XSS, and CSRF

020 GitHub stars

03Specialized security checks for Solana blockchain transactions and wallet signatures

04Schema-based input validation and secure file upload patterns

05Secure authentication and authorization guidance, including Supabase RLS

06Detection and remediation of hardcoded secrets and credentials

사용 사례

01Auditing new API endpoints for potential vulnerabilities before deployment

02Implementing secure user authentication and session management systems

03Securing sensitive financial or personal data handling in web applications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc security-review

For use in Claude.ai and ChatGPT