skills.rest
gonzoblasco
gonzoblascoCOMMUNITY
Explore all skills by this author →
𝕏@gonzoblascoGitHub

Security Audit (Modelo de Amenazas y Blindaje)

Analyze backend code for multi-tenancy, authentication, and data sensitivity vulnerabilities.

Updated Aug 23, 2026
Search Tags:#security audit#data isolation#system integrity#threat model#backend code
One-click install
npx skills add https://github.com/gonzoblasco/club-camping-lobos --skill security-audit-modelo-de-amenazas-y-blindaje
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Audit (Modelo de Amenazas y Blindaje)
Source: https://github.com/gonzoblasco/club-camping-lobos/tree/main/.agents/skills/security-audit
Command: npx skills add https://github.com/gonzoblasco/club-camping-lobos --skill security-audit-modelo-de-amenazas-y-blindaje

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill performs a focused, in-depth security analysis on the attack surface of backend code. It operates under a specific threat model for the backend, ensuring absolute data isolation (Multi-Tenancy) and system integrity.

Core Features & Use Cases

  • Multi-Tenancy Data Leak Detection: Identifies misuse of database clients with service_role or admin_client permissions that bypass RLS rules.
  • Authentication Verification: Ensures endpoints in API directories implement explicit session verification for user requests.
  • Internal Communication Secret Verification: Validates the presence and accuracy of internal communication keys in service-to-service, middleware, or webhook endpoints.
  • Frontend Data Sensitivity Check: Ensures data models sent to the frontend do not include sensitive information like credentials or raw integration data.

Quick Start

Run the Security Audit Skill on your backend code to check for potential security risks and get a list of findings.

Frequently Asked Questions about Security Audit (Modelo de Amenazas y Blindaje)

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect multi-tenancy data leaks in backend code?▼

To detect multi-tenancy data leaks, this security audit identifies misuse of database clients using service_role or admin_client permissions that bypass Row Level Security rules in backend code.

What is a threat model for backend security analysis?▼

A backend threat model is a structured security analysis framework focusing on attack surfaces like multi-tenancy isolation, authentication, internal communication, and frontend data sensitivity to ensure system integrity.

Can I verify API authentication and internal webhook secrets automatically?▼

Yes, the audit verifies API endpoints implement explicit session verification and validates the presence and accuracy of internal communication keys in service-to-service, middleware, or webhook endpoints.

Does this security audit check frontend data models for sensitive information?▼

Yes, the security audit performs a frontend data sensitivity check to ensure data models sent to the frontend do not include sensitive information like credentials or raw integration data.

What do I need to run a backend code security audit?▼

You need a backend codebase to analyze. The audit operates on the provided codebase to identify potential security vulnerabilities and outputs a list of findings based on the threat model.

Related Skills

Explore More Software Engineering Skills→
wonderslifewonderslife
13

system-architect

Scaffold project structures and technology stacks with starter templates.

Community
Advanced
Scheune10-codingScheune10-coding

saas-security-checklist

Scan Next.js, Supabase, and Stripe SaaS apps for security gaps.

Community
Advanced
arm2armarm2arm
4

hermes-api-server

Expose Hermes as an OpenAI-compatible API backend with configurable host, port, and API key protection.

Community
Intermediate
stephanjstephanj
9

security-reviewer

Conducts security audits and vulnerability assessments on codebases and infrastructure.

Community
Advanced