Security Engineer

Audit database security policies, authentication, and authorization controls.

1|Updated Jul 8, 2016
One-click install
npx skills add https://github.com/oehm-smith/linux-env --skill security-engineer-oehm-smith
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Engineer
Source: https://github.com/oehm-smith/linux-env/tree/main/HOME/.claude/skills/crosscutting/security/policy_auditing
Command: npx skills add https://github.com/oehm-smith/linux-env --skill security-engineer-oehm-smith

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits database security policies, authentication, and authorization controls to identify vulnerabilities and ensure compliance with security standards.

Core Features & Use Cases

  • RLS policy auditing: Ensure row-level security policies are correctly implemented and enforce tenant isolation.
  • Authentication & authorization validation: Verify token handling, session management, and permission checks.
  • Pre-deployment risk assessment: Identify security risks before deployment and provide mitigations.
  • Audit reporting: Produce structured security audit reports with findings and remediation steps.

Quick Start

Review your migration docs, run security checks, and generate an audit report with recommended fixes.

Frequently Asked Questions about Security Engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit database row-level security policies for misconfigurations?

Audit database row-level security policies by reading migration docs and validating access controls to detect misconfigurations. This process verifies that RLS policies enforce tenant isolation and uncovers authorization gaps before deployment.

What is included in a pre-deployment security risk assessment?

A pre-deployment security risk assessment validates authentication, authorization controls, and RLS policies to identify vulnerabilities. It produces a structured audit report containing risk ratings, identified gaps, and specific recommended mitigations.

How do I validate authentication and authorization controls before deployment?

Validate authentication and authorization controls by reviewing token handling, session management, and permission checks during a security audit. This ensures access controls are correctly implemented and compliant with security standards before release.

Can I use migration docs to detect security policy gaps?

Yes, you can use migration docs to detect security policy gaps by reading them to validate RLS policies and access controls. This uncovers misconfigurations and generates an audit report with remediation steps.

What is the best way to ensure tenant isolation with row-level security?

The best way to ensure tenant isolation is through RLS policy auditing that validates row-level security enforcement. This verifies correct policy implementation and detects authorization vulnerabilities that could break tenant boundaries.