Does it handle sensitive data management?

Absolutely. It provides specific guidelines for redacting sensitive data from logs and ensuring secrets are exclusively stored in environment variables rather than source code.

Is it compatible with Supabase security?

Yes, it includes dedicated guidance for implementing Row Level Security (RLS) and secure authentication policies specifically tailored for Supabase environments.

Can it help with blockchain security?

Yes, it includes specific patterns for the Solana ecosystem, including wallet ownership verification and transaction validation to prevent common pitfalls like blind signing.

How does this skill prevent SQL injection?

It enforces the use of parameterized queries and ORM/query builders while strictly forbidding string concatenation in database interactions to ensure user input cannot execute malicious commands.

What validation libraries does it support?

It features specialized implementation patterns for Zod, providing a robust framework for validating user input schemas and file upload constraints.

Security Review & Vulnerability Audit

Name: Security Review & Vulnerability Audit
Author: saar120

bysaar120

0•

安全与测试

Conducts comprehensive security audits and provides hardened implementation patterns for authentication, data protection, and input validation.

The Security Review skill transforms Claude into an automated security consultant, providing deep-dive audits and best-practice implementation patterns for modern web applications. It covers critical security vectors including secrets management, SQL injection prevention, XSS mitigation, and secure authentication flows using httpOnly cookies. With specialized checklists for API development, file uploads, and even blockchain-specific security for Solana, this skill ensures that every line of code is production-ready and resilient against common vulnerabilities like CSRF and data exposure.

主要功能

01Blockchain-specific security for Solana transactions and wallets

020 GitHub stars

03Comprehensive security checklists for secrets and input validation

04Hardened patterns for SQL injection and XSS prevention

05Secure authentication and authorization implementation guides

06Automated dependency vulnerability scanning and audit workflows

使用场景

01Implementing secure authentication or payment features in a web application

02Hardening API endpoints against SQL injection and CSRF attacks

03Conducting a pre-deployment security review of a production codebase

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add saar120/skillgate-registry security-review

For use in Claude.ai and ChatGPT

主要功能

01Blockchain-specific security for Solana transactions and wallets

020 GitHub stars

03Comprehensive security checklists for secrets and input validation

04Hardened patterns for SQL injection and XSS prevention

05Secure authentication and authorization implementation guides

06Automated dependency vulnerability scanning and audit workflows

使用场景

01Implementing secure authentication or payment features in a web application

02Hardening API endpoints against SQL injection and CSRF attacks

03Conducting a pre-deployment security review of a production codebase

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add saar120/skillgate-registry security-review

For use in Claude.ai and ChatGPT