How does it handle database-level security?

Security Core provides extensive documentation and implementation patterns for Row Level Security (RLS) specifically tailored for Supabase and PostgreSQL environments.

Does this skill help with OWASP compliance?

Yes, it includes a comprehensive prevention guide for the OWASP Top 10 vulnerabilities, covering risks such as SQL injection, XSS, CSRF, and broken access control.

What languages does the Security Core skill support?

The skill provides specialized security guidance, implementation patterns, and middleware templates for TypeScript (Node.js), Python (FastAPI), and Rust (Axum).

Does it include automated security scanning tools?

Yes, the skill features an audit_security.sh script that automates dependency vulnerability scanning and detects hardcoded secrets within your codebase.

Can this skill help with OAuth for CLI or desktop applications?

Yes, it includes specific implementation patterns and documentation for the OAuth 2.0 Device Authorization Flow, which is designed for applications that lack a traditional browser redirect.

Security Core

Name: Security Core
Author: aaronbassett

byaaronbassett

Security & Testing

Secures applications with comprehensive expertise in authentication, authorization, and OWASP Top 10 compliance for TypeScript, Python, and Rust projects.

About

The Security Core skill serves as a specialized security consultant for your development workflow, providing implementation patterns and automated tools for complex security requirements. It offers deep expertise in modern authentication flows like JWT and OAuth (including Device Flow for CLI apps), multi-tenant authorization strategies like Row Level Security (RLS), and comprehensive hardening techniques. Whether you are performing a security audit, setting up secrets management, or defending against the OWASP Top 10, this skill provides the scripts, middleware templates, and best practices needed to build production-grade, secure software.

Key Features

Automated security auditing scripts for dependency scanning and secret detection
Advanced authorization models including RBAC, ABAC, and Supabase/PostgreSQL RLS
0 GitHub stars
Comprehensive OAuth 2.0 and JWT implementation patterns for web and CLI apps
Ready-to-use security middleware templates for Express, FastAPI, and Axum
OWASP Top 10 mitigation guides and HTTP security header configurations

Use Cases

Conducting automated security audits and code reviews to identify vulnerabilities
Implementing secure authentication and multi-tenant data isolation in SaaS applications
Hardening API infrastructure with rate limiting, CORS policies, and secure secrets management

About

Key Features

Automated security auditing scripts for dependency scanning and secret detection
Advanced authorization models including RBAC, ABAC, and Supabase/PostgreSQL RLS
0 GitHub stars
Comprehensive OAuth 2.0 and JWT implementation patterns for web and CLI apps
Ready-to-use security middleware templates for Express, FastAPI, and Axum
OWASP Top 10 mitigation guides and HTTP security header configurations

Use Cases

Conducting automated security audits and code reviews to identify vulnerabilities
Implementing secure authentication and multi-tenant data isolation in SaaS applications
Hardening API infrastructure with rate limiting, CORS policies, and secure secrets management