Can this skill help prevent SQL injection?

Yes, it provides specific guidance and code examples for using parameterized queries and ORM sanitization to prevent SQL injection attacks.

What does the Security Review skill do?

It provides Claude with specialized patterns and checklists to identify potential vulnerabilities and implement industry-standard security best practices during the development process.

How does it handle input validation?

It promotes schema-based validation using tools like Zod and provides strict patterns for validating file uploads by size, type, and extension.

Does it support blockchain security?

The skill includes specialized patterns for Solana development, including wallet ownership verification and transaction detail validation.

When should I activate this skill?

Activate this skill whenever you are implementing authentication, handling user input, working with secrets, creating API endpoints, or handling payments.

Security Review Assistant

Name: Security Review Assistant
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Conducts comprehensive security audits and implements defensive coding patterns for web applications, APIs, and smart contract integrations.

This skill empowers Claude to act as a security-focused pair programmer by providing standardized checklists and production-ready code patterns for critical application areas. It guides the implementation of secure authentication, robust input validation using Zod, and protection against common vulnerabilities like SQL injection, XSS, and CSRF. Whether you are handling sensitive user data, integrating Solana blockchain wallets, or preparing for a production deployment, this skill ensures your codebase follows industry-standard security best practices and maintains a strong defensive posture.

主要功能

01Hardened secrets management and environment variable enforcement

020 GitHub stars

03Blockchain-specific security for Solana wallet and transaction verification

04Secure authentication flows using httpOnly cookies and Row Level Security (RLS)

05Schema-based input validation and restricted file upload patterns

06Automated security testing templates for rate limiting and authorization

使用场景

01Hardening API endpoints against SQL injection and cross-site scripting (XSS) attacks

02Performing pre-deployment security audits to identify hardcoded secrets and logic flaws

03Implementing secure payment processing and sensitive data handling in modern web apps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cc-skill-security-review

For use in Claude.ai and ChatGPT

主要功能

01Hardened secrets management and environment variable enforcement

020 GitHub stars

03Blockchain-specific security for Solana wallet and transaction verification

04Secure authentication flows using httpOnly cookies and Row Level Security (RLS)

05Schema-based input validation and restricted file upload patterns

06Automated security testing templates for rate limiting and authorization

使用场景

01Hardening API endpoints against SQL injection and cross-site scripting (XSS) attacks

02Performing pre-deployment security audits to identify hardcoded secrets and logic flaws

03Implementing secure payment processing and sensitive data handling in modern web apps

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/izacenter cc-skill-security-review

For use in Claude.ai and ChatGPT