security

Audit Next.js and T3 stack applications for security vulnerabilities across twelve categories.

34|6|Updated Jun 30, 2026
One-click install
npx skills add https://github.com/flavien-ia/hypervibe-harness --skill security-flavien-ia
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/flavien-ia/hypervibe-harness/tree/main/skills/security
Command: npx skills add https://github.com/flavien-ia/hypervibe-harness --skill security-flavien-ia

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill identifies common security vulnerabilities in web applications, such as exposed secrets, broken access controls, and insecure configurations, providing clear, non-technical explanations and automated fixes.

Core Features & Use Cases

  • Comprehensive Audit: Scans for 12 risk categories including SQL injection, SSRF, and dependency vulnerabilities.
  • Educational Reporting: Translates complex security flaws into plain language with concrete consequences and actionable advice.
  • Automated Remediation: Safely applies fixes for headers, dependency updates, and configuration issues with user approval.
  • Use Case: Run this before a production launch to ensure your authentication, database queries, and environment variables are configured securely.

Quick Start

Run the security audit on your current project to identify and fix potential vulnerabilities.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Next.js app for security vulnerabilities before launch?

To audit your Next.js app for security vulnerabilities, you can run an automated scan that analyzes source code, environment configurations, and dependency trees. This evaluates risks across twelve categories including authentication, input validation, and SSRF to prepare your application for a secure production launch.

What security risks does a T3 stack application typically have?

A T3 stack application typically faces security risks such as exposed secrets, broken access controls, SQL injection, and insecure configurations. Analyzing your source code and environment configurations helps identify these vulnerabilities across twelve distinct risk categories.

Can I automatically fix insecure environment configurations in my Next.js project?

Yes, you can automatically fix insecure environment configurations in your Next.js project. Automated remediation scripts can safely apply patches for headers, dependency updates, and configuration issues, provided you grant explicit user approval before execution.

Does the security audit work with T3 stack dependency trees?

Yes, the security audit works with T3 stack dependency trees by analyzing them to detect known vulnerabilities. It evaluates your project's dependencies alongside source code and environment configurations to identify risks and enforce security best practices.

How do I harden my Next.js authentication and input validation?

To harden your Next.js authentication and input validation, run an audit that evaluates these specific risk categories within your source code. The audit translates complex flaws into actionable advice and executes automated remediation scripts to enforce security best practices.