Is it compatible with modern web frameworks?

Yes, it features implementation examples for Next.js, TypeScript, Zod, and Express, making it highly relevant for modern full-stack development.

Does it support blockchain development?

The skill specifically includes security patterns for Solana, such as wallet ownership verification and transaction validation to prevent blind signing.

Can it assist with database security?

Yes, it includes guidance on using parameterized queries to prevent SQL injection and setting up Row Level Security (RLS) for platforms like Supabase.

How does this skill help with secret management?

It provides patterns to move hardcoded keys to environment variables and ensures sensitive files are correctly ignored by version control systems.

Security Review Pro

Name: Security Review Pro
Author: Nixdorfer

byNixdorfer

•

安全与测试

Conducts comprehensive security audits and implements best practices for authentication, data handling, and infrastructure protection.

The Security Review skill empowers developers to build hardened applications by providing a structured framework for identifying vulnerabilities and implementing industry-standard security patterns. From secret management and input validation with Zod to SQL injection prevention and Row Level Security (RLS) in Supabase, this skill offers actionable checklists and code snippets to ensure every part of the development lifecycle—including API design, payment processing, and even blockchain transactions—is secure by design.

主要功能

011 GitHub stars

02Blockchain-specific security for Solana wallet and transaction verification

03Comprehensive OWASP-aligned protection against SQLi, XSS, and CSRF

04Advanced authentication patterns including httpOnly cookies and Row Level Security

05Hardened secret management and environment variable configuration patterns

06Robust input validation using schema-based verification and file upload limits

使用场景

01Auditing third-party dependencies and blockchain transaction logic for potential vulnerabilities

02Reviewing API endpoints for proper authorization and rate limiting before production deployment

03Implementing secure payment processing and sensitive user data handling pipelines

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add nixdorfer/claudecodetool security-review

For use in Claude.ai and ChatGPT

Download Skill