Does this skill support blockchain security?

Yes, it includes specialized modules for Solana, focusing on wallet signature verification and transaction validation logic.

What common vulnerabilities does this skill help prevent?

It provides specific code patterns and checklists to mitigate the OWASP Top 10, including SQL injection, XSS, CSRF, and broken access control.

How does it handle sensitive API keys and secrets?

The skill enforces strict rules against hardcoding secrets, providing templates for environment variable management and secure deployment configurations.

Can it help with database-specific security?

Absolutely. It covers parameterized queries for SQL and Row Level Security (RLS) implementation specifically for Supabase environments.

Security Review & Audit

Name: Security Review & Audit
Author: AmbushData

byAmbushData

0•

安全与测试

Implements rigorous security checklists and industry-standard patterns to protect applications from vulnerabilities, data leaks, and unauthorized access.

The Security Review skill acts as an automated security architect for your development workflow, providing comprehensive guidance on safeguarding sensitive features. It enforces best practices for authentication, secrets management, and input validation while offering specialized patterns for SQL injection prevention, XSS mitigation, and CSRF protection. Whether you are building API endpoints, handling complex payment flows, or working with Supabase and Solana, this skill ensures your code meets modern security standards and passes a pre-deployment audit before reaching production.

主要功能

010 GitHub stars

02Advanced protection against SQL injection, XSS, and CSRF attacks.

03Comprehensive security checklists for authentication, authorization, and secrets management.

04Robust input validation patterns using Zod and secure file upload strategies.

05Specialized security protocols for Solana blockchain transactions and wallet verification.

06Rate limiting and sensitive data redaction patterns for logging and error handling.

使用场景

01Hardening API endpoints and backend services against common OWASP Top 10 vulnerabilities.

02Implementing secure payment processing and sensitive user data storage workflows.

03Conducting automated pre-deployment security audits for Next.js, Supabase, and Solana projects.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ambushdata/ai_setup security-review

For use in Claude.ai and ChatGPT

主要功能

010 GitHub stars

02Advanced protection against SQL injection, XSS, and CSRF attacks.

03Comprehensive security checklists for authentication, authorization, and secrets management.

04Robust input validation patterns using Zod and secure file upload strategies.

05Specialized security protocols for Solana blockchain transactions and wallet verification.

06Rate limiting and sensitive data redaction patterns for logging and error handling.

使用场景

01Hardening API endpoints and backend services against common OWASP Top 10 vulnerabilities.

02Implementing secure payment processing and sensitive user data storage workflows.

03Conducting automated pre-deployment security audits for Next.js, Supabase, and Solana projects.