How does it handle sensitive data in logs?

It provides strict 'Always/Never' guidelines to ensure sensitive information like passwords and tokens are redacted from server logs and error messages.

Does it provide a checklist for production deployments?

Yes, it includes a comprehensive pre-deployment security checklist covering secrets, CORS, RLS, and security headers.

Can it help with blockchain-specific security concerns?

Yes, it includes specialized verification steps for Solana, covering wallet ownership verification and transaction balance checks.

Does this skill automatically fix security vulnerabilities?

The skill identifies vulnerabilities and provides specific, secure code patterns and checklists to guide the developer in implementing the correct fixes.

What validation libraries are recommended by this skill?

The skill features Zod as a primary example for schema-based validation, but its principles apply to any robust validation framework.

Security Review Pro

Name: Security Review Pro
Author: Aventerica89

byAventerica89

0•

安全与测试

Enforces rigorous security standards and identifies vulnerabilities across authentication, data handling, and secrets management.

The Security Review skill provides an automated security auditing framework for Claude Code, ensuring your application remains resilient against modern attack vectors. It implements comprehensive checklists for the OWASP Top 10, including SQL injection prevention, XSS mitigation, and CSRF protection. By providing standardized patterns for Zod input validation, secure cookie handling, and environment variable management, this skill helps developers build production-ready software that safeguards sensitive user data and prevents credential leakage. It also includes specialized modules for blockchain security, specifically targeting Solana wallet and transaction verification.

主要功能

01Standardized patterns for schema-based input validation and file upload security

02Specialized security audits for Solana blockchain transactions and wallet signatures

03Automated security checklists for API endpoints and authentication flows

040 GitHub stars

05Comprehensive SQL injection and Cross-Site Scripting (XSS) prevention strategies

06Secure secrets management protocols to prevent hardcoded credential exposure

使用场景

01Implementing secure payment processing and sensitive data storage in production environments

02Hardening backend API endpoints against unauthorized access and injection attacks

03Auditing legacy codebases to migrate from hardcoded secrets to secure environment variables

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add aventerica89/claude-codex security-review

For use in Claude.ai and ChatGPT

Download Skill