Does it support blockchain-specific security checks?

Yes, it includes specialized validation steps for Solana, covering wallet signature verification and transaction integrity checks.

What security standards does this skill follow?

The skill aligns with industry-standard best practices including the OWASP Top 10, Next.js security documentation, and Supabase security guidelines.

How does it help with secret management?

It provides strict patterns and verification steps to ensure no API keys or passwords are hardcoded, enforcing the use of environment variables and .gitignore best practices.

Can it prevent common web attacks like XSS and CSRF?

Absolutely. It provides implementation examples for HTML sanitization, Content Security Policy (CSP) headers, and CSRF token validation.

Is there a pre-deployment checklist included?

Yes, it features a detailed production-readiness checklist covering HTTPS, security headers, dependency audits, and logging safety.

Security Reviewer

Name: Security Reviewer
Author: ysyecust

byysyecust

•

安全与测试

Enforces comprehensive security best practices and identifies potential vulnerabilities during the development process.

The Security Reviewer skill provides a rigorous framework for auditing code to identify and mitigate common security risks. It offers standardized checklists and implementation patterns for critical areas such as secret management, input validation, SQL injection prevention, and robust authentication. Designed for modern web development, it includes specific guidance for popular frameworks like Next.js and services like Supabase, as well as specialized security patterns for blockchain transactions on Solana, ensuring your application remains resilient against OWASP Top 10 threats.

主要功能

012 GitHub stars

02Pre-built patterns for preventing XSS, CSRF, and SQL injection attacks

03Comprehensive security checklists for authentication and authorization workflows

04Strict secret management protocols to prevent accidental credential leakage

05Specialized security checks for Solana blockchain and Supabase Row Level Security

06API rate limiting and sensitive data masking implementation guides

使用场景

01Auditing new API endpoints and authentication flows for security vulnerabilities

02Reviewing environment variable configurations and dependency safety before production deployment

03Implementing secure file upload and user input validation logic

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ysyecust/everything-claude-code security-review

For use in Claude.ai and ChatGPT

Download Skill