What blockchain security features are included?

It provides specialized patterns for Solana development, including wallet ownership verification and transaction validation to prevent unauthorized transfers.

Does it support modern frameworks like Next.js and Supabase?

Absolutely. It includes specific guidance for Next.js security headers and Supabase Row Level Security (RLS) to ensure full-stack protection.

Can it help prevent SQL injection in my database queries?

Yes, the skill provides patterns for parameterized queries and ORM usage to ensure user input is never directly concatenated into SQL strings.

How does this skill help with secrets management?

It enforces the use of environment variables and provides specific verification steps to ensure no API keys or passwords are hardcoded or committed to version control.

Is there a checklist for production deployments?

Yes, it includes a detailed pre-deployment security checklist covering everything from HTTPS enforcement to dependency vulnerability scanning.

Security Review & Audit

Name: Security Review & Audit
Author: filipas123

byfilipas123

•

安全与测试

Performs comprehensive security audits and provides implementation patterns to protect applications against common vulnerabilities and data exposure.

The Security Review skill is a specialized capability for Claude Code designed to enforce industry-standard security practices throughout the development lifecycle. It provides a robust framework for identifying vulnerabilities like SQL injection, XSS, and broken authentication while offering production-ready code patterns for secrets management, input validation with Zod, and secure API design. Whether you are building traditional web applications or blockchain-based solutions on Solana, this skill ensures your code meets rigorous security requirements and follows a pre-deployment checklist to minimize risk.

主要功能

01Defense strategies against SQL injection, XSS, CSRF, and API rate limiting.

021 GitHub stars

03Comprehensive security checklists for authentication, authorization, and RLS.

04Specialized blockchain security for Solana wallet and transaction verification.

05Robust input and file upload validation patterns using Zod and type checks.

06Automated patterns for secure secrets management and environment safety.

使用场景

01Implementing secure API endpoints with proper validation and rate limiting.

02Auditing codebases for hardcoded secrets, sensitive data leaks, or insecure logs.

03Configuring Row Level Security (RLS) and secure cookie handling for web apps.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add filipas123/claude-code-pkc-v1 security-review

For use in Claude.ai and ChatGPT

Download Skill