Is there support for blockchain security?

Yes, the skill includes specialized verification steps for Solana, including wallet signature verification and transaction integrity checks.

How does the Security Review skill prevent SQL injection?

The skill enforces the use of parameterized queries and discourages any form of string concatenation in database interactions, providing specific code patterns for libraries like Supabase and raw SQL.

Does it support modern frontend security?

Absolutely. It includes patterns for XSS prevention using DOMPurify, Content Security Policy (CSP) configuration, and secure cookie handling for JWTs.

Can this skill help with secrets management?

Yes, it identifies hardcoded API keys and credentials, providing a checklist to ensure all sensitive information is moved to environment variables and ignored by version control.

Security Review & Hardening

Name: Security Review & Hardening
Author: arabicapp

byarabicapp

•

Security & Testing

Audits code for vulnerabilities and enforces industry-standard security best practices across authentication, data handling, and infrastructure.

The Security Review skill transforms Claude into a proactive security auditor, providing comprehensive checklists and defensive coding patterns to safeguard your applications. It covers critical security domains including secrets management, input validation via Zod, SQL injection prevention, and cross-site scripting (XSS) mitigation. By integrating this skill, developers can ensure that every API endpoint, database query, and user interaction follows a 'security-first' approach, reducing the risk of data breaches and unauthorized access in production environments.

Key Features

01Pre-deployment security audits covering headers, CSRF, and rate limiting

02Automated detection of hardcoded secrets and sensitive data exposure in logs

03Defensive code patterns for SQL injection and XSS prevention

041 GitHub stars

05Specialized security protocols for Solana blockchain and wallet verification

06Comprehensive security checklists for authentication, authorization, and data storage

Use Cases

01Auditing new API endpoints for broken object-level authorization (BOLA) and missing rate limits

02Hardening Supabase or PostgreSQL databases using Row Level Security (RLS) and parameterized queries

03Implementing secure authentication flows using httpOnly cookies and Zod validation

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add arabicapp/everything-claude-code security-review

For use in Claude.ai and ChatGPT

Download Skill