Does it provide guidance on file upload security?

Yes, it includes a detailed workflow for validating file types, checking sizes, and implementing secure storage practices to prevent malicious uploads.

Is this skill specific to .NET applications?

While the reference patterns are provided in C#, the security principles, checklists, and scanning logic are designed to be adapted to any programming language or framework.

How does this skill help with OWASP compliance?

It provides specific checklists and secure code patterns for all 10 OWASP categories, including SQL injection prevention, broken access control, and SSRF mitigation.

Can it detect hardcoded secrets in my repository?

Yes, the skill includes specialized grep-based scanning commands to identify hardcoded passwords, API keys, and connection strings across your project files.

Security Architecture Review

Name: Security Architecture Review
Author: CongDon1207

byCongDon1207

•

安全与测试

Conducts comprehensive security audits and implements robust authorization patterns based on OWASP Top 10 standards.

关于

The Security Architecture Review skill empowers Claude to identify and remediate security vulnerabilities across your codebase with surgical precision. By leveraging OWASP Top 10 principles, it provides structured workflows for auditing broken access control, cryptographic failures, and injection risks. This skill is essential for developers implementing complex authentication systems, securing sensitive data handlers, or performing pre-deployment vulnerability assessments to ensure enterprise-grade protection for their applications.

主要功能

Automated OWASP Top 10 vulnerability assessment and remediation guidance
Implementation of secure authorization patterns at controller, handler, and query levels
Detailed data protection strategies including encryption at rest and PII masking
Integrated security scanning commands for secret detection and vulnerable dependencies
Comprehensive checklists for authentication, input validation, and secure file uploads
1 GitHub stars

使用场景

Performing a comprehensive security audit on new feature pull requests
Refactoring legacy endpoints to implement modern rate-limiting and authorization patterns
Identifying and securing hardcoded credentials or sensitive data leaks in configuration files

关于

主要功能

Automated OWASP Top 10 vulnerability assessment and remediation guidance
Implementation of secure authorization patterns at controller, handler, and query levels
Detailed data protection strategies including encryption at rest and PII masking
Integrated security scanning commands for secret detection and vulnerable dependencies
Comprehensive checklists for authentication, input validation, and secure file uploads
1 GitHub stars

使用场景

Performing a comprehensive security audit on new feature pull requests
Refactoring legacy endpoints to implement modern rate-limiting and authorization patterns
Identifying and securing hardcoded credentials or sensitive data leaks in configuration files