What types of vulnerabilities does this skill help prevent?

This skill provides patterns and checklists to mitigate common risks including SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and insecure secrets management.

Does it include blockchain-specific security?

Yes, it includes specialized sections for Solana, covering wallet signature verification, transaction detail validation, and balance checks to prevent common web3 vulnerabilities.

How does it improve secrets management?

It enforces the move from hardcoded credentials to environment variables, provides verification steps for Git ignores, and offers code patterns for validating environment variables at runtime.

Does this skill work with specific programming languages?

The examples focus on TypeScript, SQL, and Node.js environments, but the security principles and checklists are broadly applicable to most modern web development stacks.

Security Review & Hardening

Name: Security Review & Hardening
Author: claudiodearaujo

byclaudiodearaujo

0•

Security & Testing

Implements comprehensive security checklists and best practice patterns for authentication, input validation, and sensitive data protection.

This skill provides a robust framework for auditing and securing code within the Claude Code environment. It guides developers through critical security layers including secrets management, SQL injection prevention, XSS/CSRF protection, and specialized blockchain security for Solana. By providing concrete code patterns for Zod validation, secure cookie handling, and Row Level Security, it ensures that applications are hardened against common vulnerabilities and follow OWASP-aligned standards from the first line of code.

Key Features

01Secure secrets management auditing to prevent credential leaks

02Specialized security verification for Solana blockchain transactions and wallets

03Schema-based input validation patterns using Zod and TypeScript

04Comprehensive protection strategies for SQL injection, XSS, and CSRF

05Automated security checklists for API endpoints and authentication flows

060 GitHub stars

Use Cases

01Hardening authentication systems and implementing secure JWT storage

02Auditing database queries and file upload logic for injection risks

03Reviewing new API endpoints and backend logic for security vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cc-skill-security-review

For use in Claude.ai and ChatGPT

Key Features

01Secure secrets management auditing to prevent credential leaks

02Specialized security verification for Solana blockchain transactions and wallets

03Schema-based input validation patterns using Zod and TypeScript

04Comprehensive protection strategies for SQL injection, XSS, and CSRF

05Automated security checklists for API endpoints and authentication flows

060 GitHub stars

Use Cases

01Hardening authentication systems and implementing secure JWT storage

02Auditing database queries and file upload logic for injection risks

03Reviewing new API endpoints and backend logic for security vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cc-skill-security-review

For use in Claude.ai and ChatGPT