shipshitdev avatar

Security Expert

This is your security reviewer for React, Next.js, and NestJS apps. It covers the practical stuff: authentication patterns with JWT and OAuth, authorization with RBAC, input validation with DTOs, and security headers like CSP and HSTS. The OWASP Top 10 quick reference is genuinely useful for code reviews. It'll check your project's CLAUDE.md and .agents/memory for existing security rules before making recommendations, which is smart. The checklists are thorough without being preachy. Treat this as a second pair of eyes that actually knows the difference between bcrypt and base64, not as a replacement for thinking through your threat model.

skills.sh installs
141
GitHub stars
24
last updated
Jun 3, 2026

Install

$ npx -y skills add shipshitdev/library --skill security-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

This is your security reviewer for React, Next.js, and NestJS apps. It covers the practical stuff: authentication patterns with JWT and OAuth, authorization with RBAC, input validation with DTOs, and security headers like CSP and HSTS. The OWASP Top 10 quick reference is genuinely useful for code reviews. It'll check your project's CLAUDE.md and .agents/memory for existing security rules before making recommendations, which is smart. The checklists are thorough without being preachy. Treat this as a second pair of eyes that actually knows the difference between bcrypt and base64, not as a replacement for thinking through your threat model.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/shipshitdev/library
Category
Security
First seen
Jun 3, 2026

More from shipshitdev/library

All 56

Recommended

More Security
1vudovn avatarvulnerability-scannervudovn/antigravity-kitvulnerability scanner127skills.sh installs
2absolutelyskilled avatarcloud-securityabsolutelyskilled/absolutelyskilledcloud security124skills.sh installs
3erichowens avatarsecurity-auditorerichowens/some_claude_skillssecurity auditor123skills.sh installs
4laolaoshiren avatarsecurity-auditlaolaoshiren/claude-code-skills-zh代码安全审计 - 漏洞扫描、依赖检查、安全最佳实践0skills.sh installs
5sickn33 avatarbroken-authenticationsickn33/antigravity-awesome-skillsbroken authentication testing0skills.sh installs
6microsoft avatarazure-rbacmicrosoft/github-copilot-for-azureHelps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides gu103Kskills.sh installs