skills.rest
hyperlane-xyz
hyperlane-xyzOFFICIAL
Explore all skills by this author →
Website𝕏@hyperlaneGitHub

claude-security-review

Identify security vulnerabilities in frontend Web3 code during code reviews.

188|211|Updated Dec 4, 2022
Search Tags:#frontend#xss#dependencies#csp#web3#security-review#pr-comments
One-click install
npx skills add https://github.com/hyperlane-xyz/hyperlane-warp-ui-template --skill claude-security-review
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: claude-security-review
Source: https://github.com/hyperlane-xyz/hyperlane-warp-ui-template/tree/main/.claude/skills/claude-security-review
Command: npx skills add https://github.com/hyperlane-xyz/hyperlane-warp-ui-template --skill claude-security-review

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams systematically identify and fix security gaps in frontend Web3 code, reducing risk in wallet integrations, user data handling, and third-party dependencies.

Core Features & Use Cases

  • Identify XSS, CSP, and dependency risks in frontend Web3 code.
  • Provide actionable fixes and severity ratings for PR feedback.
  • Use Case: Review a wallet integration change to prevent key leakage and insecure third-party scripts.

Quick Start

Read and apply the security guidelines from .github/prompts/security-scan.md to review code changes.

Frequently Asked Questions about claude-security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify XSS vulnerabilities in frontend Web3 code during code reviews?▼

XSS vulnerabilities in frontend Web3 code occur when untrusted input reaches the DOM without sanitization, especially in wallet integrations. This skill scans PRs for XSS risks, CSP header gaps, and unsafe third-party scripts, then flags them with severity levels and inline PR comments to guide fixes.

Can I use automated security review for wallet integration changes?▼

Yes. This skill reviews wallet integration PRs to prevent key leakage and insecure third-party script injection. It applies security guidelines from your repository, documents findings by severity, and adds inline PR comments so developers fix issues before merge.

What dependency security risks does this catch in Web3 frontend code?▼

Dependency security review identifies outdated or compromised packages in frontend Web3 projects. The skill scans dependency updates across PRs, flags risky versions with severity ratings, and provides actionable remediation steps tied to specific lines of code.

How does CSP header configuration prevent frontend Web3 attacks?▼

Content Security Policy headers restrict script execution and resource loading, blocking XSS attacks and malicious third-party code in Web3 frontends. This skill detects missing or misconfigured CSP headers in code changes and recommends fixes aligned with your security guidelines.

Does this work with existing PR workflows?▼

Yes. The skill integrates into PR reviews using inline PR comments anchored to specific code lines. It reads security guidelines from your repository, applies them to branch changes, and surfaces findings directly in the PR so teams can address them before merging.

Related Skills

Explore More Software Engineering Skills→
signalcomposesignalcompose
4

git-workflow-setup

Configure Git Flow or GitHub Flow with branch protection and security settings.

Official
Advanced
ZateZate
9

audit-report

Generate structured security audit reports with findings, severity, and ASVS mappings.

Community
Advanced
zangjeicyzangjeicy

requesting-code-review

Scan git diffs for security vulnerabilities and quality regressions.

Community
Advanced
erichowenserichowens
181

security-auditor

Identifies security vulnerabilities in codebases and dependencies across multiple languages.

Community
Advanced