ai-trading-security-audit

Audit authentication and Turnstile integrity across ai_trading_bot and ai-trading_frontend.

Updated Aug 8, 2025
One-click install
npx skills add https://github.com/Priyo13o4/ai-trading --skill ai-trading-security-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: ai-trading-security-audit
Source: https://github.com/Priyo13o4/ai-trading/tree/main/.agents/skills/security-audit
Command: npx skills add https://github.com/Priyo13o4/ai-trading --skill ai-trading-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, repeatable security and authentication audit for the ai_trading_bot and ai-trading_frontend projects, ensuring correct integration of Supabase sessions, Redis-backed auth, and Cloudflare Turnstile.

Core Features & Use Cases

  • Systematic 9-point audit covering auth flow, session handling, Turnstile integration, and environment parity across dev/local/prod.
  • Useful during auth-related PR reviews and debugging sessions to verify architecture and protections.
  • Guides developers through mapping components: frontend, backend, secret management, and deployment configuration.

Quick Start

Run the security-audit skill against the ai_trading_bot and ai-trading_frontend to verify authentication and Turnstile wiring before merging auth-related PRs.

Frequently Asked Questions about ai-trading-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit FastAPI authentication and Cloudflare Turnstile integration?

To audit FastAPI authentication and Cloudflare Turnstile integration, run a systematic 9-point checklist that verifies auth flow, session handling, and environment parity across dev/local/prod deployments.

Why does my Redis session handling drop users across dev and prod environments?

Redis session handling drops users across dev and prod due to environment parity issues; auditing environment variable usage and deployment configuration helps verify correct Redis-backed auth and Supabase session integration.

Does this security audit check Cloudflare Turnstile enforcement and code routing protections?

Yes, this security audit checks Cloudflare Turnstile enforcement and code routing protections by mapping architecture components, frontend, backend, and secret management to ensure authentication integrity.

What's the best way to review auth-related PRs for an AI trading bot?

The best way to review auth-related PRs for an AI trading bot is applying a structured security audit that verifies Turnstile wiring, Redis session handling, and environment parity before merging.

When do I need to run a security and authentication audit on FastAPI and frontend projects?

You need to run a security and authentication audit on FastAPI and frontend projects during auth-related PR reviews and debugging sessions to ensure correct integration of Supabase sessions, Redis-backed auth, and Turnstile.