Does it handle frontend security like XSS?

Yes, it provides patterns for sanitizing HTML using DOMPurify and configuring Content Security Policy (CSP) headers to prevent cross-site scripting attacks.

How does the Security Review skill prevent SQL injection?

The skill identifies dangerous string concatenation in queries and enforces the use of parameterized queries or modern ORM methods to sanitize all database inputs.

Does it support blockchain and Web3 security?

It includes specialized patterns for Solana, focusing on wallet signature verification, transaction detail validation, and balance checks before execution.

Can this skill help with Supabase security?

Yes, it provides specific guidance and templates for implementing Row Level Security (RLS) and secure JWT handling within the Supabase ecosystem.

When should I activate this skill?

It is best used when implementing authentication, handling user-uploaded files, creating API endpoints, or managing sensitive credentials and environment variables.

Security Review & Audit

Name: Security Review & Audit
Author: ShunmeiCho

byShunmeiCho

0•

安全与测试

Enforces rigorous security standards and identifies vulnerabilities across authentication, data handling, and API implementation.

The Security Review skill serves as an automated security consultant for Claude Code, providing a comprehensive framework for identifying vulnerabilities and implementing defensive coding patterns. It guides developers through critical security layers including secrets management, robust input validation with Zod, SQL injection prevention, and secure authentication flows using httpOnly cookies and Row Level Security. By integrating standardized checklists for XSS, CSRF, and rate limiting, this skill ensures that applications are built with a security-first mindset, covering everything from standard web development to specialized blockchain transactions on Solana.

主要功能

01Automated auditing for sensitive data exposure in logs and error messages.

02Proactive protection against SQL injection, XSS, and CSRF through proven code patterns.

03Blockchain-specific security modules for Solana wallet and transaction verification.

040 GitHub stars

05Comprehensive security checklists for authentication, authorization, and secrets management.

06Standardized input validation patterns using Zod and file upload restriction logic.

使用场景

01Hardening new API endpoints and authentication flows against OWASP Top 10 vulnerabilities.

02Implementing secure database access patterns and Supabase Row Level Security (RLS).

03Conducting pre-deployment security audits to ensure environment variables and dependencies are secure.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add shunmeicho/claude-config security-review

For use in Claude.ai and ChatGPT

Download Skill