What common vulnerabilities does this skill address?

The skill provides patterns to prevent the OWASP Top 10, including SQL Injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), and sensitive data exposure.

Can this skill help with blockchain development?

It includes specialized security checklists for Solana, focusing on wallet signature verification and transaction validation to prevent common Web3 exploits.

How does it handle secrets management?

The skill enforces the use of environment variables, prevents hardcoded keys in source code, and provides verification steps to ensure secrets are not committed to git history.

Does it support modern JavaScript validation libraries?

Yes, it specifically promotes and provides implementation patterns for Zod to ensure robust, schema-based input validation.

Security Review

Name: Security Review
Author: unju-ai

byunju-ai

0•

安全与测试

Enforces rigorous security standards and identifies potential vulnerabilities across authentication, data handling, and API implementation.

The Security Review skill provides a comprehensive framework for auditing codebases and implementing defensive programming patterns within Claude Code. It offers structured guidance on secrets management, Zod-based input validation, and protection against common threats like SQL injection, XSS, and CSRF. By integrating industry-standard practices and specific checklists for modern stacks like Next.js, Supabase, and Solana, this skill ensures that developers build production-ready applications that prioritize user data protection and system integrity.

主要功能

01Automated secrets management and environment variable verification

02Prevention of SQL injection, XSS, and CSRF vulnerabilities

03Specialized blockchain security checks for Solana wallet and transactions

040 GitHub stars

05Schema-based input validation and secure file upload patterns

06Comprehensive authentication and Row Level Security (RLS) implementation

使用场景

01Securing API endpoints against rate-limiting issues and sensitive data exposure

02Performing a pre-deployment security audit for a production-ready application

03Implementing secure authentication flows and role-based access control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add unju-ai/ecc security-review

For use in Claude.ai and ChatGPT