Can it help with secure file uploads?

Yes, it includes checklists for validating file size, MIME types, and extensions to prevent malicious files from being processed by your server.

What authentication methods does it cover?

It covers modern best practices including JWT handling via HttpOnly cookies, Role-Based Access Control (RBAC), and Supabase Row Level Security (RLS).

Does this skill support blockchain-specific security?

Yes, it includes specific validation patterns for Solana, focusing on wallet signature verification and transaction integrity.

How does it help prevent SQL Injection?

The skill provides patterns for parameterized queries and ORM usage that prevent dangerous string concatenation in database calls.

When should I use the Security Review skill?

Use this skill whenever you are implementing authentication, handling user input, creating API endpoints, or working with sensitive data like payments or API secrets.

Security Review Auditor

Name: Security Review Auditor
Author: Infopibe

byInfopibe

•

安全与测试

Audits application code for vulnerabilities and enforces security best practices across authentication, input handling, and data storage.

The Security Review skill provides a comprehensive framework for identifying and mitigating security vulnerabilities in modern web applications. It offers specialized guidance on handling sensitive operations like authentication, secret management, and API development using industry-standard patterns. From preventing SQL injection and XSS to implementing Solana blockchain transaction verification, this skill ensures your code follows a robust security checklist to protect against the most common and critical web-based attacks.

主要功能

01Advanced prevention strategies for SQL injection, XSS, and CSRF vulnerabilities

02Hardcoded secret detection and environment variable enforcement patterns

03Secure authentication patterns including HttpOnly cookies and Row Level Security (RLS)

04Comprehensive input validation schemas using Zod and file upload verification

051 GitHub stars

06Solana blockchain wallet signature and transaction verification guidance

使用场景

01Ensuring sensitive data and secrets are never exposed in logs or git history

02Reviewing new API endpoints for authorization gaps and rate-limiting implementation

03Hardening frontend applications against Cross-Site Scripting (XSS) and CSRF attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add infopibe/everything-claude-code security-review

For use in Claude.ai and ChatGPT

主要功能

01Advanced prevention strategies for SQL injection, XSS, and CSRF vulnerabilities

02Hardcoded secret detection and environment variable enforcement patterns

03Secure authentication patterns including HttpOnly cookies and Row Level Security (RLS)

04Comprehensive input validation schemas using Zod and file upload verification

051 GitHub stars

06Solana blockchain wallet signature and transaction verification guidance

使用场景

01Ensuring sensitive data and secrets are never exposed in logs or git history

02Reviewing new API endpoints for authorization gaps and rate-limiting implementation

03Hardening frontend applications against Cross-Site Scripting (XSS) and CSRF attacks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add infopibe/everything-claude-code security-review

For use in Claude.ai and ChatGPT