skills.rest
vctplatform
vctplatformCOMMUNITY
Explore all skills by this author →
GitHub

security-engineer

Implement authentication, RBAC, and OWASP compliance for the VCT Platform.

Updated Aug 27, 2026
Search Tags:#authorization#security#authentication#owasp#supabase#rbac#data protection
One-click install
npx skills add https://github.com/vctplatform/vct-erp --skill security-engineer-vctplatform
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-engineer
Source: https://github.com/vctplatform/vct-erp/tree/main/vct-erp/.agents/skills/security-engineer
Command: npx skills add https://github.com/vctplatform/vct-erp --skill security-engineer-vctplatform

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures the VCT Platform is robustly secured against vulnerabilities, manages user access effectively, and protects sensitive data through best practices and compliance.

Core Features & Use Cases

  • Authentication & Authorization: Implements secure user sign-up, login, and session management using Supabase Auth, supporting various providers and MFA.
  • Role-Based Access Control (RBAC): Defines and enforces granular permissions for different user roles, ensuring users only access data and features they are authorized for.
  • Data Protection & Compliance: Leverages Supabase RLS and Neon security features to protect data at rest and in transit, adhering to OWASP Top 10 and data privacy standards.
  • Use Case: A new user registers for the VCT Platform. The skill ensures their authentication is secure, assigns them the default 'athlete' role, and uses RLS to restrict their access to only their own profile data.

Quick Start

Configure the security headers for the VCT Platform application.

Frequently Asked Questions about security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement Role-Based Access Control with Supabase Auth for user authorization?▼

Role-Based Access Control with Supabase Auth is implemented by defining granular permissions for user roles, ensuring users only access authorized data. It assigns default roles like 'athlete' upon registration and restricts access using RLS.

How does Supabase Row Level Security protect data and enforce OWASP compliance?▼

Supabase Row Level Security protects data at rest and in transit by enforcing OWASP Top 10 compliance. It restricts user access to only their own profile data, ensuring robust data protection and privacy.

What is the best way to configure authentication and MFA for a web platform?▼

Authentication and MFA are configured using Supabase Auth to manage secure user sign-up, login, and session management. This approach supports various providers to ensure robust access controls.

Can I use Go middleware to enforce authorization and security headers?▼

Yes, Go middleware enforces authorization and configures security headers for the application. It works with Supabase Auth and RLS to provide robust security controls and manage platform posture.

How do I restrict user access to specific profile data using Supabase RLS?▼

Supabase RLS restricts user access to specific profile data by assigning default roles like 'athlete' upon registration. It enforces Row Level Security policies to ensure users only access their own data.

Does vulnerability scanning for OWASP Top 10 require Neon database setup?▼

Vulnerability scanning for OWASP Top 10 utilizes Neon security features alongside Supabase RLS. Proper database setup is required to protect data at rest and in transit while maintaining compliance.

Related Skills

Explore More Software Engineering Skills→
jhouserjhouser

backend-dev-guidelines

Establish Go/Chi/PostgreSQL backend practices with Clean Architecture.

Community
Intermediate
Omar-ObandoOmar-Obando
44

security-auditor

Guide security audits across OWASP Top 10 and compliance frameworks.

Community
Intermediate
sbalagan22sbalagan22

nextjs-supabase-auth

Integrate Supabase Auth with Next.js App Router for middleware-protected routes.

Community
Advanced
Spectaculous-CodeSpectaculous-Code

rls-policy-validator

Validate and generate Supabase Row Level Security policies with SQL functions.

Official
Advanced