Does it provide guidance on file upload security?

Yes, it includes a detailed workflow for validating file types, checking sizes, and implementing secure storage practices to prevent malicious uploads.

Is this skill specific to .NET applications?

While the reference patterns are provided in C#, the security principles, checklists, and scanning logic are designed to be adapted to any programming language or framework.

How does this skill help with OWASP compliance?

It provides specific checklists and secure code patterns for all 10 OWASP categories, including SQL injection prevention, broken access control, and SSRF mitigation.

Can it detect hardcoded secrets in my repository?

Yes, the skill includes specialized grep-based scanning commands to identify hardcoded passwords, API keys, and connection strings across your project files.

Security Architecture Review

Name: Security Architecture Review
Author: CongDon1207

byCongDon1207

•

Security & Testing

Conducts comprehensive security audits and implements robust authorization patterns based on OWASP Top 10 standards.

The Security Architecture Review skill empowers Claude to identify and remediate security vulnerabilities across your codebase with surgical precision. By leveraging OWASP Top 10 principles, it provides structured workflows for auditing broken access control, cryptographic failures, and injection risks. This skill is essential for developers implementing complex authentication systems, securing sensitive data handlers, or performing pre-deployment vulnerability assessments to ensure enterprise-grade protection for their applications.

Key Features

01Automated OWASP Top 10 vulnerability assessment and remediation guidance

02Implementation of secure authorization patterns at controller, handler, and query levels

03Detailed data protection strategies including encryption at rest and PII masking

04Integrated security scanning commands for secret detection and vulnerable dependencies

05Comprehensive checklists for authentication, input validation, and secure file uploads

061 GitHub stars

Use Cases

01Performing a comprehensive security audit on new feature pull requests

02Refactoring legacy endpoints to implement modern rate-limiting and authorization patterns

03Identifying and securing hardcoded credentials or sensitive data leaks in configuration files

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add congdon1207/agents.md arch-security-review

For use in Claude.ai and ChatGPT

Download Skill