Skip to main content
affpapa.org
RU EN
skill

cc-skill-security-review · davila7 — Claude Code skill: setup guide

Security checklist and defensive code patterns for Claude Code. Guides the assistant during authentication setup and API endpoint creation.

Install into Claude Code · claude-code-templates All methods and platforms ↓ 
npx claude-code-templates@latest --skill development/cc-skill-security-review
Open on GitHub

What cc-skill-security-review does

The skill equips Claude Code with defensive programming guidelines. It directs the AI assistant to catch unsafe coding habits, such as storing auth tokens in localStorage or stitching raw user input directly into SQL queries.

The checklist details input validation, file upload limits, cross-site scripting safeguards, and endpoint rate limits. Code snippets demonstrate patterns using TypeScript libraries like zod for object validation, DOMPurify for HTML sanitization, and express-rate-limit for request quotas, alongside Supabase Row Level Security rules.

Adopting these rules requires installing the respective validation or sanitization packages in your application codebase.

What it helps with

  • spot hardcoded secrets and unhandled environment variables
  • enforce strict request schema validation using Zod
  • configure httpOnly cookies and SameSite attributes for JWT tokens
  • write parameterized database queries to block SQL injection

Example prompts for the agent

  • Review this user registration route against security guidelines
  • Implement file upload validation checking size, mime type, and extension
  • Check our database queries to ensure all inputs are parameterized

How to install cc-skill-security-review

1claude-code-templates

npx claude-code-templates@latest --skill development/cc-skill-security-review

2Skills CLI (Vercel)

npx skills add davila7/claude-code-templates --skill cc-skill-security-review -a claude-code

3Manually: put the files in place

~/.claude/skills/cc-skill-security-review/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/cc-skill-security-review/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about cc-skill-security-review

How to install cc-skill-security-review in Claude Code?

Run npx claude-code-templates@latest --skill development/cc-skill-security-review in your terminal.

What does cc-skill-security-review do?

It provides Claude Code with a reference checklist and code patterns to prevent vulnerabilities when handling secrets and database queries.

Which packages are referenced in the security patterns?

The skill features TypeScript examples relying on zod for payload checks, isomorphic-dompurify for HTML scrubbing, and express-rate-limit for request throttling.

Similar skills

All skills for Security →

cc-skill-security-review by other authors comes first.

cc-skill-security-review sickn33 Reviews code for SQL injection, XSS, leaked secrets, and authorization flaws. Use it when building APIs, file uploads, or authentication. CX Codex +1 2,100installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set804

The whole set →
voice-agents Walks you through picking a voice agent architecture, budgeting latency and handling interruptions without awkward pauses. 194installs production-code-audit This skill scans a codebase, finds architecture, security, performance, and quality issues, then applies fixes. Use it when preparing a project for production. 193installs agent-md-refactor Splits oversized CLAUDE.md or AGENTS.md files into modular docs. It leaves only universal directives in root and links out to detailed subtopics. 193installs monte-carlo-simulator A slash command that runs Monte Carlo simulations: probability distributions, confidence intervals and risk metrics. 193installs tdd-gate The hook blocks edits to production files until a matching test exists. Useful if you want the agent to keep the TDD order. 192installs README README outlines language-focused subagents and their ecosystems. Use it to find a specialist for coding, modernization, or performance work. 192installs move Moves tasks across status folders while updating trackers and task metadata. Use it when a workflow needs explicit transitions between work and QA stages. 190installs parallel-agents Orchestrates specialized sub-agents inside Claude Code for multi-perspective code reviews and cross-domain feature analysis. 189installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor