Does it scan for hardcoded secrets?

Yes, the skill includes built-in commands and audit points to detect hardcoded API keys, tokens, and passwords, suggesting migration to Supabase Secrets Manager.

Can I use this for production security readiness?

Absolutely. It includes templates for comprehensive security reports and checklists for production-grade security headers, CORS settings, and environment variable management.

How does this skill help with Supabase security?

It provides specific patterns for Row Level Security (RLS), JWT verification, and secure Edge Function configurations tailored specifically for the Supabase platform.

Does it detect the OWASP Top 10 vulnerabilities?

Yes, it includes detailed audit points and secure coding examples for all ten OWASP categories, ranging from broken access control to SSRF.

Security Audit & Vulnerability Assessment

Name: Security Audit & Vulnerability Assessment
Author: fixlifyapp

byfixlifyapp

보안 및 테스팅

Performs deep security audits and vulnerability assessments to harden Supabase-based applications against modern threats.

소개

This specialized skill equips Claude with the expertise of a senior security engineer to perform exhaustive audits of your software's security posture. It focuses specifically on the Supabase and Vercel ecosystem, offering automated checks for Row Level Security (RLS), JWT-based authentication, and secure Edge Function deployment. By integrating OWASP Top 10 best practices and providing actionable remediation patterns, the skill helps developers identify data isolation issues, cryptographic failures, and injection vulnerabilities before they reach production.

주요 기능

Secure Edge Function and CORS configuration patterns
Automated secret detection and dependency scanning
0 GitHub stars
OWASP Top 10 compliance auditing and checklists
Supabase Row Level Security (RLS) policy verification
Standardized security reporting and remediation templates

사용 사례

Auditing multi-tenant data isolation and RLS policies for database security
Hardening API endpoints and Edge Functions for production readiness
Identifying and fixing common web vulnerabilities like XSS, SQLi, and SSRF

소개

주요 기능

Secure Edge Function and CORS configuration patterns
Automated secret detection and dependency scanning
0 GitHub stars
OWASP Top 10 compliance auditing and checklists
Supabase Row Level Security (RLS) policy verification
Standardized security reporting and remediation templates

사용 사례

Auditing multi-tenant data isolation and RLS policies for database security
Hardening API endpoints and Edge Functions for production readiness
Identifying and fixing common web vulnerabilities like XSS, SQLi, and SSRF