security-audit

RLS auditing validates that all database operations use context wrappers instead of direct queries, ensuring row-level security policies are enforced. This Skill scans your access patterns, checks for policy gaps, and identifies exposure risks before deployment.

OWASP Top 10 compliance checks verify parameterized queries, input validation with Zod, environment-based secrets management, and route authentication. This Skill applies these checks across your API surface to block injection, broken auth, and data exposure vulnerabilities.

Yes. Pre-deployment security review gates your release by running vulnerability scanning on database access patterns, library dependencies, and authentication enforcement. This Skill identifies gaps in RLS policies and API security so you can remediate before going live.

Prepare context wrappers for all data access, use parameterized queries with no direct Prisma calls, store secrets in environment variables, and validate inputs with Zod. The audit requires these patterns in place to assess OWASP compliance accurately.

Vulnerability scanning examines your data access layer to detect unprotected queries, missing RLS policies, and authentication gaps. It traces database operations through your codebase and flags patterns that expose data or violate OWASP standards.