Is this skill useful for blockchain development?

Yes, it contains a dedicated section for Solana blockchain security, covering wallet ownership verification and transaction validation.

What vulnerabilities does this skill help identify?

The skill identifies a wide range of vulnerabilities including SQL injection, Cross-Site Scripting (XSS), CSRF, hardcoded secrets, and unauthorized data access.

Can it help with secrets management?

Absolutely; it includes strict guidelines for using environment variables and ensures secrets are never leaked into source code, logs, or Git history.

Does it work with specific web frameworks?

Yes, it provides specific implementation patterns for Next.js, Supabase, Express, and Zod-based validation.

How does it handle input validation?

It promotes a schema-based validation approach using libraries like Zod to ensure all user data is sanitized and typed before processing.

Security Review Skill

Name: Security Review Skill
Author: Nixdorfer

byNixdorfer

•

Security & Testing

Conducts comprehensive security audits and implements industry-standard protection patterns for web applications and APIs.

The Security Review skill empowers developers to build secure-by-default applications by providing automated checklists and implementation patterns for critical security domains. From secrets management and input validation using Zod to preventing SQL injection and XSS, this skill ensures that sensitive features like authentication, payments, and API endpoints adhere to OWASP best practices. It includes specialized guidance for Supabase Row Level Security and Solana blockchain transactions, making it an essential companion for modern full-stack and Web3 development workflows.

Key Features

01Secure secrets management and sensitive data exposure prevention in logs and errors

02Specialized security protocols for Supabase RLS and Solana blockchain wallet verification

03Automated security checklists for authentication and authorization workflows

041 GitHub stars

05Advanced protection patterns against SQL injection, XSS, and CSRF vulnerabilities

06Standardized input validation patterns using Zod and secure file upload logic

Use Cases

01Performing a pre-deployment security audit on a new Next.js or Node.js API

02Hardening database interactions against SQL injection using parameterized queries and ORM best practices

03Implementing secure authentication systems with httpOnly cookies and role-based access

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nixdorfer/claudecodetool security-review

For use in Claude.ai and ChatGPT

Download Skill