How does this skill help with secrets management?

It enforces the use of environment variables and provides strict checklists to ensure API keys, tokens, and passwords never enter the source code or git history.

Does this skill support blockchain development?

It includes specialized security patterns for the Solana ecosystem, including wallet signature verification and transaction detail validation.

How does it handle user input validation?

The skill promotes whitelist-based validation using Zod schemas for all inputs and includes specific protocols for safe file upload handling.

Can it prevent common web attacks like SQL Injection and XSS?

Yes, it provides patterns for parameterized queries to stop SQL injection and uses libraries like DOMPurify and CSP configurations to prevent cross-site scripting.

Security Review

Name: Security Review
Author: nbossn

bynbossn

0•

Security & Testing

Audits code for vulnerabilities and implements security best practices across authentication, input validation, and sensitive data handling.

The Security Review skill provides Claude with a comprehensive framework for identifying and fixing common security vulnerabilities during the development process. It enforces strict patterns for secrets management, prevents SQL injection and XSS attacks, and ensures robust authentication and authorization flows. By providing domain-specific guidance for modern web stacks—including Next.js, Supabase, and Solana blockchain integration—it helps developers build production-grade applications that protect user data and maintain integrity against malicious exploits.

Key Features

01Blockchain-specific security for Solana wallet and transaction verification

02Rate limiting and sensitive data exposure monitoring for API endpoints

030 GitHub stars

04Advanced authentication auditing including JWT handling and Row Level Security

05Automated security checklists for secrets management and input validation

06Implementation patterns for SQL injection and XSS prevention

Use Cases

01Securing new API endpoints and user input forms using Zod schema validation

02Performing pre-deployment security audits to identify hardcoded secrets or exposed logs

03Implementing robust authentication systems with httpOnly cookies and role-based access control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nbossn/claude-code-base security-review

For use in Claude.ai and ChatGPT

Key Features

01Blockchain-specific security for Solana wallet and transaction verification

02Rate limiting and sensitive data exposure monitoring for API endpoints

030 GitHub stars

04Advanced authentication auditing including JWT handling and Row Level Security

05Automated security checklists for secrets management and input validation

06Implementation patterns for SQL injection and XSS prevention

Use Cases

01Securing new API endpoints and user input forms using Zod schema validation

02Performing pre-deployment security audits to identify hardcoded secrets or exposed logs

03Implementing robust authentication systems with httpOnly cookies and role-based access control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nbossn/claude-code-base security-review

For use in Claude.ai and ChatGPT