Skill UI

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

This skill simulates a senior engineer conducting comprehensive code reviews. It analyzes code diffs and files to identify bugs, security vulnerabilities (e.g., SQL injection, XSS), performance issues (N+1), code smells, and architectural flaws. It is ideal for reviewing pull requests, performing code quality audits, or conducting security assessments, providing structured, actionable, and prioritized feedback.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Detect SQL injection weaknesses by running the sql-injection-detector plugin against codebases, identifying risky queries, and providing remediation guidance to secure applications.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

A comprehensive tool for detecting critical API security vulnerabilities, including injection, broken authentication (BOLA), excessive data exposure, and mass assignment. It audits endpoints against the OWASP API Security Top 10 standards by analyzing source code, middleware chains, and request validation logic. Ideal for pre-deployment security gates, CI/CD integration, and compliance audits.