Does this skill cover blockchain-specific security?

Yes, it includes specialized checks for Solana, including wallet ownership verification and transaction signature validation.

How does this skill prevent SQL injection?

It enforces the use of parameterized queries and specialized database clients like Supabase or Prisma while flagging dangerous string concatenation in SQL statements.

How does it handle Cross-Site Scripting (XSS)?

It provides guidance on using DOMPurify for HTML sanitization and configuring Content Security Policy (CSP) headers in frameworks like Next.js.

Does it support modern JavaScript validation libraries?

Absolutely. It provides specific implementation patterns using Zod for robust runtime type checking and input validation.

Can it help with secret management?

Yes, it detects hard-coded API keys or passwords and provides instructions on how to properly move them to environment variables and .gitignore files.

Security Review Expert

Name: Security Review Expert
Author: Fabio29T

byFabio29T

0•

Security & Testing

Audits code for security vulnerabilities and enforces best practices for authentication, input handling, and data protection.

The Security Review skill provides a rigorous framework for identifying and mitigating security risks across your entire codebase. It acts as a specialized consultant that enforces best practices for sensitive operations, including secret management, input validation with Zod, and SQL injection prevention. Whether you are building complex authentication flows, handling file uploads, or implementing blockchain transactions on Solana, this skill provides actionable checklists and secure implementation patterns to ensure your application remains resilient against common threats like XSS, CSRF, and unauthorized data access.

Key Features

01Comprehensive security checklists for API endpoints and data handling.

02Input validation patterns for schemas and secure file uploads.

03Cross-site scripting (XSS) and SQL injection prevention strategies.

04Hard-coded secret detection and environment variable enforcement.

050 GitHub stars

06Specialized blockchain security validation for Solana wallet interactions.

Use Cases

01Hardening API endpoints and implementing robust authentication/authorization flows.

02Performing pre-deployment security audits to catch sensitive data leaks or misconfigured headers.

03Ensuring database interactions use parameterized queries and Row Level Security (RLS) in Supabase.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fabio29t/everything-claude security-review

For use in Claude.ai and ChatGPT

Key Features

01Comprehensive security checklists for API endpoints and data handling.

02Input validation patterns for schemas and secure file uploads.

03Cross-site scripting (XSS) and SQL injection prevention strategies.

04Hard-coded secret detection and environment variable enforcement.

050 GitHub stars

06Specialized blockchain security validation for Solana wallet interactions.

Use Cases

01Hardening API endpoints and implementing robust authentication/authorization flows.

02Performing pre-deployment security audits to catch sensitive data leaks or misconfigured headers.

03Ensuring database interactions use parameterized queries and Row Level Security (RLS) in Supabase.