skills.rest
heyflouai
heyflouaiCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

IKF Security Review Gate Skill

Audits IKF Central backend changes for authentication, RLS, storage, API, SQL injection, secrets, and dependencies.

Updated Aug 23, 2026
Search Tags:#security#rls#backend#audit#supabase#data privacy#api security
One-click install
npx skills add https://github.com/heyflouai/ikf-central-dashboard --skill ikf-security-review-gate-skill
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: IKF Security Review Gate Skill
Source: https://github.com/heyflouai/ikf-central-dashboard/tree/main/.claude/skills/ikf-security-review-gate
Command: npx skills add https://github.com/heyflouai/ikf-central-dashboard --skill ikf-security-review-gate-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures that all backend changes made to the IKF Central dashboard undergo a mandatory and comprehensive security audit before being merged or a phase is completed, preventing data breaches and unauthorized access.

Core Features & Use Cases

  • Automated Security Audits: Performs checks against a detailed security checklist covering authentication, RLS, storage, API exposure, and secrets management.
  • Pre-Merge/Phase Gate: Acts as a mandatory checkpoint to block incomplete or insecure changes.
  • Use Case: After a developer pushes changes to the database schema or API endpoints, this Skill automatically runs to verify that no new security vulnerabilities have been introduced, ensuring forecast data remains private and access-controlled.

Quick Start

Run the IKF Security Review Gate skill to audit backend changes.

Frequently Asked Questions about IKF Security Review Gate Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Supabase row-level security policies before merging backend changes?▼

To audit Supabase row-level security before merging, this Skill runs a mandatory security gate that checks authentication, RLS policies, storage access, and API surface minimization to prevent unauthorized data access.

What does a pre-merge security gate check for in a backend API?▼

A pre-merge security gate checks for SQL injection risks, data leakage, exposed secrets, and API surface vulnerabilities to ensure no insecure backend modifications are merged into the codebase.

How can I automatically prevent data leakage when modifying database schemas?▼

You can prevent data leakage during schema modifications by running an automated security audit that validates row-level security configurations and storage policies before phase completion.

Does this security review work with existing Supabase authentication and storage policies?▼

Yes, this security review evaluates existing Supabase authentication and storage policies by inspecting access controls, verifying RLS enforcement, and identifying API exposure vulnerabilities during backend updates.

When do I need to run an automated security audit on backend modifications?▼

You need to run an automated security audit on backend modifications before completing a development phase or merging code, serving as a mandatory checkpoint to block insecure database schema or API endpoint changes.

Related Skills

Explore More Software Engineering Skills→
ionmidoriionmidori

type-safe-backend-patterns

Implement type-safe backend architectures with Supabase and Drizzle ORM.

Community
Intermediate
manhdung3010manhdung3010

novacore-backend-architecture

Enforce NovaCore Spring Boot layered architecture and DTO usage in Java code.

Community
Advanced
skyasu2skyasu2
2

security-audit-workflow

Automate pre-deployment security audits for Next.js/Supabase CI pipelines.

Community
Advanced
seb1nseb1n
147

static-application-security-testing

Run SAST scans with Semgrep and CodeQL to detect vulnerabilities in source code.

Community
Advanced