How does it help with secret management?

The skill identifies hardcoded API keys or passwords and provides instructions for moving them to environment variables and secure hosting configurations.

Does it include automated security test patterns?

Yes, it provides code snippets for testing authentication, authorization, and rate limiting to ensure security measures are working as intended.

Does it support specific web frameworks?

Yes, it includes specific implementation patterns for TypeScript, Zod, Next.js, and Supabase Row Level Security (RLS).

Can this skill help with blockchain security?

Yes, it contains specialized modules for Solana, including wallet signature verification and transaction validation logic.

What does the Security Review skill do?

It provides Claude with a comprehensive framework to audit code for vulnerabilities and apply security best practices like input validation, CSRF protection, and secret management.

Security Reviewer

Name: Security Reviewer
Author: sori883

bysori883

0•

보안 및 테스팅

Conducts comprehensive security audits and implements defensive coding patterns to protect applications from common vulnerabilities.

The Security Reviewer skill empowers Claude to identify and mitigate critical security risks throughout the software development lifecycle. It provides deep domain expertise in secret management, input validation, and protection against high-profile threats like SQL injection, XSS, and CSRF attacks. By leveraging detailed checklists and production-grade code patterns, this skill ensures that your application follows industry best practices and OWASP standards. It features specialized guidance for modern stacks including Next.js, Supabase Row Level Security, and Solana blockchain integrations, making it an essential companion for building robust, production-ready software.

주요 기능

01Automated testing patterns for authentication, authorization, and rate limiting

02Robust input validation patterns using Zod and schema-based sanitization

030 GitHub stars

04Specialized security modules for Solana blockchain and Supabase RLS policies

05Comprehensive pre-deployment security checklists covering 10 critical domains

06Secure secret management guidance to prevent accidental credential leakage

사용 사례

01Reviewing third-party integrations and file upload logic for potential security gaps

02Auditing new API endpoints and database queries for injection vulnerabilities

03Implementing secure authentication flows and session management with httpOnly cookies

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sori883/ai-settings security-review

For use in Claude.ai and ChatGPT

주요 기능

01Automated testing patterns for authentication, authorization, and rate limiting

02Robust input validation patterns using Zod and schema-based sanitization

030 GitHub stars

04Specialized security modules for Solana blockchain and Supabase RLS policies

05Comprehensive pre-deployment security checklists covering 10 critical domains

06Secure secret management guidance to prevent accidental credential leakage

사용 사례

01Reviewing third-party integrations and file upload logic for potential security gaps

02Auditing new API endpoints and database queries for injection vulnerabilities

03Implementing secure authentication flows and session management with httpOnly cookies