Does it scan for hardcoded secrets?

Yes, the skill includes built-in commands and audit points to detect hardcoded API keys, tokens, and passwords, suggesting migration to Supabase Secrets Manager.

Can I use this for production security readiness?

Absolutely. It includes templates for comprehensive security reports and checklists for production-grade security headers, CORS settings, and environment variable management.

How does this skill help with Supabase security?

It provides specific patterns for Row Level Security (RLS), JWT verification, and secure Edge Function configurations tailored specifically for the Supabase platform.

Does it detect the OWASP Top 10 vulnerabilities?

Yes, it includes detailed audit points and secure coding examples for all ten OWASP categories, ranging from broken access control to SSRF.

Security Audit & Vulnerability Assessment

Name: Security Audit & Vulnerability Assessment
Author: fixlifyapp

byfixlifyapp

0•

セキュリティとテスト

Performs deep security audits and vulnerability assessments to harden Supabase-based applications against modern threats.

This specialized skill equips Claude with the expertise of a senior security engineer to perform exhaustive audits of your software's security posture. It focuses specifically on the Supabase and Vercel ecosystem, offering automated checks for Row Level Security (RLS), JWT-based authentication, and secure Edge Function deployment. By integrating OWASP Top 10 best practices and providing actionable remediation patterns, the skill helps developers identify data isolation issues, cryptographic failures, and injection vulnerabilities before they reach production.

主な機能

01Secure Edge Function and CORS configuration patterns

02Automated secret detection and dependency scanning

030 GitHub stars

04OWASP Top 10 compliance auditing and checklists

05Supabase Row Level Security (RLS) policy verification

06Standardized security reporting and remediation templates

ユースケース

01Auditing multi-tenant data isolation and RLS policies for database security

02Hardening API endpoints and Edge Functions for production readiness

03Identifying and fixing common web vulnerabilities like XSS, SQLi, and SSRF

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fixlifyapp/fixlify-main security-audit

For use in Claude.ai and ChatGPT

Download Skill