Security Hardening Checklist

About

This skill enables Claude to conduct thorough security assessments by systematically analyzing application code, middleware configurations, and database policies. It identifies critical vulnerabilities such as missing security headers, insecure cookie settings, permissive Row-Level Security (RLS) in Supabase or PostgreSQL, and lack of rate limiting on API endpoints. Beyond discovery, it generates detailed audit reports with prioritized recommendations and provides production-ready code snippets to automate the implementation of security best practices.

Key Features

• Database Row-Level Security (RLS) policy evaluation for Supabase
• Comprehensive security report generation with prioritized action items
• Identification of insecure cookie attributes and session management
• Automated detection of input sanitization gaps and SQL injection risks
• Systematic audit of security headers and Next.js configurations
• 0 GitHub stars

Use Cases

• Preparing a Next.js or Supabase application for production deployment
• Conducting a vulnerability assessment to identify common security gaps
• Implementing security best practices like rate limiting and CORS policies