What types of vulnerabilities does this skill help prevent?

This skill provides patterns and checklists to mitigate common risks including SQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and insecure secrets management.

Does it include blockchain-specific security?

Yes, it includes specialized sections for Solana, covering wallet signature verification, transaction detail validation, and balance checks to prevent common web3 vulnerabilities.

How does it improve secrets management?

It enforces the move from hardcoded credentials to environment variables, provides verification steps for Git ignores, and offers code patterns for validating environment variables at runtime.

Does this skill work with specific programming languages?

The examples focus on TypeScript, SQL, and Node.js environments, but the security principles and checklists are broadly applicable to most modern web development stacks.

Security Review & Hardening

Name: Security Review & Hardening
Author: claudiodearaujo

byclaudiodearaujo

Security & Testing

Implements comprehensive security checklists and best practice patterns for authentication, input validation, and sensitive data protection.

About

This skill provides a robust framework for auditing and securing code within the Claude Code environment. It guides developers through critical security layers including secrets management, SQL injection prevention, XSS/CSRF protection, and specialized blockchain security for Solana. By providing concrete code patterns for Zod validation, secure cookie handling, and Row Level Security, it ensures that applications are hardened against common vulnerabilities and follow OWASP-aligned standards from the first line of code.

Key Features

Secure secrets management auditing to prevent credential leaks
Specialized security verification for Solana blockchain transactions and wallets
Schema-based input validation patterns using Zod and TypeScript
Comprehensive protection strategies for SQL injection, XSS, and CSRF
Automated security checklists for API endpoints and authentication flows
0 GitHub stars

Use Cases

Hardening authentication systems and implementing secure JWT storage
Auditing database queries and file upload logic for injection risks
Reviewing new API endpoints and backend logic for security vulnerabilities

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cc-skill-security-review

For use in Claude.ai and ChatGPT

Download Skill

GitHub