Does it provide automated testing examples?

Yes, the skill includes patterns for automated security tests that check for authentication requirements, authorization roles, and rate limiting enforcement.

How does this skill prevent SQL injection?

The skill enforces the use of parameterized queries and provides templates for safe database interactions using ORMs or query builders, explicitly banning string concatenation in SQL commands.

Can it help with blockchain security?

Yes, it includes specific modules for Solana development, including wallet ownership verification and transaction detail validation to prevent blind signing and unauthorized transfers.

When should I activate the Security Review skill?

Activate it whenever you are handling user input, working with secrets, creating API endpoints, implementing payments, or preparing for a production deployment.

Security Review & Audit

Name: Security Review & Audit
Author: XD3an

byXD3an

0•

安全与测试

Conducts comprehensive security audits and implements defensive coding patterns to protect applications from vulnerabilities.

The Security Review skill transforms Claude into a specialized security consultant, providing a rigorous framework for identifying and mitigating common software vulnerabilities. It offers production-grade patterns for secrets management, input validation using Zod, and protection against SQL injection, XSS, and CSRF attacks. Beyond standard web security, it includes specialized modules for Supabase Row Level Security and Solana blockchain transaction verification, ensuring that your authentication flows, API endpoints, and sensitive data handling meet modern industry standards before deployment.

主要功能

01Specialized Solana blockchain wallet and transaction verification logic

02Comprehensive security checklists for pre-deployment verification

03Automated identification of hardcoded secrets and sensitive data leaks

04Robust input validation and file upload restriction schemas

05Secure implementation patterns for JWT, httpOnly cookies, and RLS

060 GitHub stars

使用场景

01Hardening production environments by moving secrets to environment variables and configuring CSP headers

02Auditing new API endpoints for common vulnerabilities like SQL injection and XSS

03Implementing secure authentication and role-based access control (RBAC) flows

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add xd3an/cc-plus security-review

For use in Claude.ai and ChatGPT

Download Skill