What does the Security Checklist skill cover?

It covers the 'minimum viable security' baseline, including authentication, input validation, secrets management, database security, network transport, and logging.

Is this a replacement for a professional security audit?

No, it is designed as a baseline to prevent common disasters and obvious vulnerabilities, but it is not an exhaustive penetration test.

How does it help with secrets management?

It provides checks for environment variable usage, .gitignore configurations, and instructions for rotating leaked API keys from git history.

Does it support specific frameworks?

Yes, it includes specific security guidance and code examples for Node.js (Express), Python (Django/Flask), and React.

Can it help with compliance?

It includes a quick reference for GDPR, CCPA, PCI DSS, and HIPAA to ensure basic data protection requirements are met.

Security Checklist Audit

Name: Security Checklist Audit
Author: jamditis

byjamditis

•

Security & Testing

Performs pre-deployment security audits for web applications to identify vulnerabilities in authentication, input validation, and infrastructure.

The Security Checklist skill provides a comprehensive, baseline security audit for web applications before they go into production. It helps developers and researchers identify common vulnerabilities such as SQL injection, cross-site scripting (XSS), and improper secrets management. By offering framework-specific code examples for Node.js, Python, and React, it ensures that applications meet 'minimum viable security' standards, covering everything from password hashing and database row-level security to CORS configuration and compliant logging practices.

Key Features

01Network and transport security validation for HTTPS, HSTS, and CORS

02Comprehensive secrets management and environment variable validation

03Pre-deployment audit for authentication and session management

0441 GitHub stars

05Framework-specific security remediation for Node.js, Python, and React

06Database security checks including Row-Level Security (RLS) auditing

Use Cases

01Auditing existing web applications for outdated security practices

02Reviewing application code for vulnerabilities before shipping to production

03Ensuring compliance with basic data protection standards like GDPR or CCPA

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jamditis/claude-skills-journalism security-checklist

For use in Claude.ai and ChatGPT

Download Skill