How does it handle secrets management?

The skill enforces strict rules against hardcoded secrets, guiding you to use environment variables and proper .gitignore configurations to prevent leaks.

Does this skill support blockchain security?

Yes, it includes specific verification patterns for Solana wallet ownership and transaction security, ensuring safe on-chain interactions.

Is this limited to specific frameworks?

While many examples use TypeScript and Next.js, the underlying security principles and patterns are applicable across most modern web development stacks.

Can it help with input validation?

Absolutely. The skill provides detailed templates for using libraries like Zod to validate user schemas, file types, and upload sizes.

Security Review

Name: Security Review
Author: oabdelmaksoud

byoabdelmaksoud

0•

安全与测试

Audits code for vulnerabilities and implements production-grade security patterns across web and blockchain applications.

The Security Review skill empowers Claude to act as a security-first developer, ensuring every line of code adheres to industry best practices. It provides comprehensive guidance on critical areas such as secrets management, SQL injection prevention, and robust input validation using Zod. Beyond basic web security like XSS and CSRF mitigation, the skill offers specialized patterns for Solana blockchain transactions and secure authentication flows. By integrating detailed checklists and 'Always vs. Never' code examples, it helps developers catch potential vulnerabilities early and prepare applications for secure production deployment.

主要功能

010 GitHub stars

02Comprehensive security checklists for pre-deployment audits

03Specialized Solana blockchain wallet and transaction verification

04Secure authentication and JWT token management strategies

05Advanced protections against SQL injection, XSS, and CSRF

06Defensive coding patterns for input validation and schema enforcement

使用场景

01Implementing rate limiting and secure data handling for high-traffic production environments

02Auditing an existing repository for hardcoded secrets or unvalidated user inputs

03Adding secure authentication, payment features, or API endpoints to a web application

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/superclaw security-review

For use in Claude.ai and ChatGPT

主要功能

010 GitHub stars

02Comprehensive security checklists for pre-deployment audits

03Specialized Solana blockchain wallet and transaction verification

04Secure authentication and JWT token management strategies

05Advanced protections against SQL injection, XSS, and CSRF

06Defensive coding patterns for input validation and schema enforcement

使用场景

01Implementing rate limiting and secure data handling for high-traffic production environments

02Auditing an existing repository for hardcoded secrets or unvalidated user inputs

03Adding secure authentication, payment features, or API endpoints to a web application

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add oabdelmaksoud/superclaw security-review

For use in Claude.ai and ChatGPT