Audit authentication, authorization, cryptography, API defenses, and Supabase hardening.
npx skills add https://github.com/luyzkk/Anti-Vibe-Coding --skill security-luyzkk
Please help me install this Agent Skill. Skill: security Source: https://github.com/luyzkk/Anti-Vibe-Coding/tree/main/skills/security Command: npx skills add https://github.com/luyzkk/Anti-Vibe-Coding --skill security-luyzkk
This Skill helps you identify and fix real security weaknesses in authentication, authorization, cryptography, API/Webhook defenses, and Supabase hardening—without generating production code.
Ask the Skill: “Audit my auth and webhook security for vulnerabilities and tell me exactly what to verify and change.”
High-intent search queries and answers about installing and using this skill.
To audit authentication and authorization flows, you review existing codebases for anti-patterns in token storage, session handling, and RBAC/ABAC policies. This process provides explicit remediation guidance and verification steps without generating production code.
Validating webhook HMAC signatures and hardening API defenses requires checking your current implementation against OWASP-inspired anti-patterns. This audit identifies cryptographic weaknesses and provides targeted verification methods to confirm your API is secure.
Checking Supabase Row Level Security policies involves auditing your database authorization rules for bypass vulnerabilities. The audit examines existing RLS configurations, explains security concepts, and outlines remediation steps to fix identified gaps.
You cannot use this security audit to generate patched production code. When you request implementation, it redirects you to the TDD workflow to ensure secure development, focusing instead on providing consultation, explicit anti-patterns, and verification steps.
Verification methods provided after identifying cryptography and session handling weaknesses include targeted grep-based checks. These methods allow you to search your codebase and confirm that the recommended security remediations have been correctly applied.
MikisbellAnalyze codebases and compare implementation approaches before development changes.
ysyecustAutomate TDD guidance for Spring Boot services with JUnit 5, Mockito, MockMvc, and Testcontainers.
rsmdtConduct security assessments on code, architecture, and infrastructure using STRIDE threat modeling.
AlejandroFiginiAnalyze projects for security vulnerabilities and generate prioritized remediation reports.
