Can this skill help with Supabase security?

Yes, it includes specific implementation guides for Row Level Security (RLS) and secure data fetching patterns within the Supabase ecosystem.

What tools does it recommend for input validation?

The skill prioritizes schema-based validation using Zod to ensure all user inputs and file uploads are strictly typed and sanitized before processing.

Is this useful for preventing XSS and CSRF?

Absolutely. It provides patterns for DOMPurify sanitization, Content Security Policy (CSP) headers, and SameSite cookie configurations to mitigate frontend attacks.

How does this skill prevent hardcoded secrets?

The skill provides patterns and verification steps to ensure all API keys and credentials are moved to environment variables and included in .gitignore, preventing them from entering version control.

Does it support blockchain or Web3 security?

Yes, it features specialized checklists for Solana, including wallet signature verification and transaction detail validation to prevent blind signing.

Security Review & Best Practices

Name: Security Review & Best Practices
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Audits code for vulnerabilities and enforces security best practices across authentication, data handling, and API development.

The Security Review skill provides a comprehensive framework for identifying and mitigating potential vulnerabilities within your codebase. It equips Claude with specialized knowledge to handle sensitive tasks such as authentication, secret management, and input validation using modern patterns like Zod. From preventing SQL injection and XSS to implementing Row Level Security in Supabase and verifying Solana blockchain transactions, this skill ensures your application adheres to the OWASP Top 10 and industry-standard security protocols before you hit production.

主要功能

01Comprehensive security checklists for authentication, authorization, and API endpoints

02Specialized blockchain security checks for Solana wallet and transaction verification

03Secure secrets management guidance to prevent hardcoded credentials

040 GitHub stars

05Automated pre-deployment security auditing for dependencies and headers

06Input validation and sanitization patterns to prevent SQL injection and XSS

使用场景

01Conducting a full security audit before deploying a web application to production

02Setting up Rate Limiting and Content Security Policies (CSP) for API protection

03Implementing secure user authentication and role-based access control (RBAC)

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front cc-skill-security-review

For use in Claude.ai and ChatGPT

Download Skill

主要功能

01Comprehensive security checklists for authentication, authorization, and API endpoints

02Specialized blockchain security checks for Solana wallet and transaction verification

03Secure secrets management guidance to prevent hardcoded credentials

040 GitHub stars

05Automated pre-deployment security auditing for dependencies and headers

06Input validation and sanitization patterns to prevent SQL injection and XSS

使用场景

01Conducting a full security audit before deploying a web application to production

02Setting up Rate Limiting and Content Security Policies (CSP) for API protection

03Implementing secure user authentication and role-based access control (RBAC)

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front cc-skill-security-review

For use in Claude.ai and ChatGPT

Download Skill