Can it assist with Web3 or blockchain security?

Yes, it features a dedicated section for Solana security, covering wallet ownership verification and transaction validation to prevent common blockchain vulnerabilities.

When should I activate the Security Reviewer skill?

You should use this skill whenever you are implementing authentication, handling user-generated content, managing API keys, or creating sensitive features like payment processing.

Does this skill work with modern frameworks like Next.js?

Yes, it includes specific security patterns for Next.js, Supabase, and TypeScript, including Row Level Security (RLS) and Content Security Policy (CSP) configurations.

How does it help prevent data leaks?

The skill enforces strict rules against hard-coding secrets, ensures sensitive data is masked in logs, and prevents detailed error stack traces from being exposed to end-users.

Security Reviewer

Name: Security Reviewer
Author: xu-xiang

byxu-xiang

•

Security & Testing

Conducts comprehensive security audits and implements best practices for authentication, data handling, and vulnerability prevention.

The Security Reviewer skill is a specialized utility for Claude Code designed to safeguard applications by enforcing rigorous security standards throughout the development lifecycle. It provides automated checklists and implementation patterns for critical areas such as secrets management, input validation using Zod, SQL injection prevention, and cross-site scripting (XSS) mitigation. Whether you are building API endpoints, handling sensitive user data, or integrating blockchain transactions on Solana, this skill ensures your code follows the OWASP Top 10 and industry-leading security protocols to prevent data leaks and unauthorized access.

Key Features

01Specialized blockchain security for Solana wallet and transaction verification

02Automated security checklists for authentication and authorization workflows

03Robust input validation and file upload sanitization logic using Zod

04Advanced protection against SQL injection, XSS, and CSRF attacks

05Best-practice patterns for secrets management and environment variable safety

0661 GitHub stars

Use Cases

01Reviewing third-party dependencies and CI/CD configurations for potential vulnerabilities

02Securing new API endpoints and database queries against injection and exposure

03Implementing hardened authentication systems with httpOnly cookies and RBAC

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add xu-xiang/everything-claude-code-zh security-review

For use in Claude.ai and ChatGPT

Download Skill