Does it support blockchain development security?

Yes, it includes specialized verification steps for Solana wallet ownership and transaction validation to ensure secure interactions in decentralized applications.

When should I activate the Security Review skill?

You should activate this skill whenever you are implementing authentication, handling user input, creating API endpoints, working with secrets, or preparing for a production deployment.

Can this skill help with database security?

Yes, it provides specific patterns for parameterized queries to prevent SQL injection and guides developers on implementing Row Level Security (RLS) for databases like Supabase.

How does the Security Review skill prevent data leaks?

It enforces strict secrets management protocols, ensuring that API keys, tokens, and credentials are never hardcoded in source code and are always managed via environment variables and secure hosting platforms.

Security Review & Audit

Name: Security Review & Audit
Author: WorldFlowAI

byWorldFlowAI

0•

安全与测试

Enforces application safety by applying comprehensive security checklists and implementation patterns for authentication, data validation, and secrets management.

The Security Review skill provides a robust framework for securing AI-assisted development projects by enforcing industry-standard best practices across critical areas like authentication, authorization, and input validation. It guides Claude to proactively identify vulnerabilities such as hardcoded secrets or SQL injection risks while providing production-ready code patterns for JWT handling, Row Level Security, and Content Security Policies. Whether you are building financial systems, handling sensitive user data, or integrating blockchain wallets, this skill acts as an automated security auditor to ensure your codebase remains resilient against common OWASP threats and deployment risks.

主要功能

010 GitHub stars

02Advanced protection strategies for XSS, CSRF, and API rate limiting

03Comprehensive secrets management protocols to prevent credential leaks

04Specialized blockchain security checks for Solana wallet and transaction verification

05Schema-based input validation patterns using Zod and file upload restrictions

06Parameterized query enforcement to eliminate SQL injection vulnerabilities

使用场景

01Implementing safe handling for user-generated content and third-party integrations

02Securing new API endpoints and authentication workflows during development

03Conducting a pre-deployment security audit of sensitive payment or data features

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add worldflowai/everything-claude-code security-review

For use in Claude.ai and ChatGPT

Download Skill