Does this skill help with database security?

Yes, it provides specific patterns for preventing SQL injection through parameterized queries and instructions for enabling Row Level Security (RLS) in databases like Supabase.

When should I activate the Security Review skill?

Activate this skill whenever you are implementing authentication, handling user input, working with secrets, creating API endpoints, or managing sensitive financial data.

Does it support blockchain development?

Yes, it includes specialized security checks for Solana, focusing on wallet ownership verification, transaction validation, and preventing blind signing.

How does it handle Cross-Site Scripting (XSS)?

It provides implementation guides for sanitizing user-provided HTML using libraries like DOMPurify and configuring strict Content Security Policy (CSP) headers.

Can it detect hardcoded secrets in my repository?

The skill provides a checklist and code patterns to ensure secrets are stored in environment variables and that sensitive files like .env are correctly ignored by Git.

Security Review & Best Practices

Name: Security Review & Best Practices
Author: saar120

bysaar120

0•

Security & Testing

Enforces rigorous security standards and identifies vulnerabilities during authentication, data handling, and API development.

The Security Review skill transforms Claude into a proactive security auditor, providing a comprehensive framework for building resilient applications. It equips developers with production-grade patterns for secrets management, input validation, and SQL injection prevention, while offering specialized guidance for modern tech stacks like Supabase and Solana. By activating this skill, teams can automate security checks, ensure compliance with OWASP principles, and eliminate common vulnerabilities like XSS, CSRF, and sensitive data exposure before code ever reaches production.

Key Features

01Comprehensive security checklists for authentication and authorization workflows

02Secrets management protocols to prevent credential leaks in source code and logs

03Proactive prevention strategies for SQL injection, XSS, and CSRF attacks

04Implementation patterns for robust input validation using Zod and schema verification

05Specialized security modules for blockchain transactions and Solana wallet verification

060 GitHub stars

Use Cases

01Auditing a new API endpoint for authentication and rate-limiting vulnerabilities

02Hardening database interactions by converting raw SQL to parameterized queries

03Implementing secure file upload logic with strict size and type restrictions

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add saar120/skillgate-registry security-review

For use in Claude.ai and ChatGPT

Key Features

01Comprehensive security checklists for authentication and authorization workflows

02Secrets management protocols to prevent credential leaks in source code and logs

03Proactive prevention strategies for SQL injection, XSS, and CSRF attacks

04Implementation patterns for robust input validation using Zod and schema verification

05Specialized security modules for blockchain transactions and Solana wallet verification

060 GitHub stars

Use Cases

01Auditing a new API endpoint for authentication and rate-limiting vulnerabilities

02Hardening database interactions by converting raw SQL to parameterized queries

03Implementing secure file upload logic with strict size and type restrictions