Originally forked from affaan-m's collection, this one runs a security checklist whenever you're touching sensitive code like auth, API endpoints, or payment flows. It covers the usual suspects: secrets management, input validation, and third-party integrations. With 430 installs and passing most security audits (Snyk flagged something minor), it's clearly getting used in the wild. The checklist approach is straightforward, maybe a bit basic if you're already security-minded, but helpful as a forcing function to actually think through the threat model before shipping. Good for teams that need consistent security reviews without slowing down too much.

skills.sh installs
471
GitHub stars
33.2K
last updated
Aug 21, 2026

Install

$ npx -y skills add davila7/claude-code-templates --skill security-review --agent claude-code

Installs into .claude/skills of the current project.

Files

Originally forked from affaan-m's collection, this one runs a security checklist whenever you're touching sensitive code like auth, API endpoints, or payment flows. It covers the usual suspects: secrets management, input validation, and third-party integrations. With 430 installs and passing most security audits (Snyk flagged something minor), it's clearly getting used in the wild. The checklist approach is straightforward, maybe a bit basic if you're already security-minded, but helpful as a forcing function to actually think through the threat model before shipping. Good for teams that need consistent security reviews without slowing down too much.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/davila7/claude-code-templates
Categories
Backend & APIs, Security, Git & Pull Requests, Code Review & Quality, Finance & Trading
First seen
Jun 3, 2026

More from davila7/claude-code-templates

All 618
1aj-geddes avatarquery-caching-strategiesaj-geddes/useful-ai-promptsImplement query caching strategies to improve performance. Use when setting up caching layers, configuring Redis, or optimizing database query response times.465skills.sh installs
2jezweb avatarcloudflare-r2jezweb/claude-skillsStore objects with R2's S3-compatible storage on Cloudflare's edge. Use when: uploading/downloading files, configuring CORS, generating presigned URLs, multipar462skills.sh installs
3ejirocodes avatarnestjs-best-practicesejirocodes/agent-skillsNestJS 11+ best practices for enterprise Node.js applications with TypeScript. Use when writing, reviewing, or refactoring NestJS controllers, services, modules460skills.sh installs
4martinholovsky avatarcelery-expertmartinholovsky/claude-skills-generatorExpert Celery distributed task queue engineer specializing in async task processing, workflow orchestration, broker configuration (Redis/RabbitMQ), Celery Beat 458skills.sh installs
5postman-devrel avatarpostmanpostman-devrel/agent-skillsFull API lifecycle management through Postman. Sync OpenAPI specs to collections, generate typed client code, run API tests, create mock servers, publish docume458skills.sh installs
6aj-geddes avatarstored-proceduresaj-geddes/useful-ai-promptsImplement stored procedures and functions for database logic. Use when creating reusable database routines, complex queries, or server-side calculations.457skills.sh installs