security-ops

What problem does it solve?

Web applications built on Next.js and Supabase are exposed to common security risks across authentication, data access, and deployment workflows. This Skill provides a structured, production-ready approach to mitigate OWASP Top 10 vulnerabilities, implement robust security headers, and enforce best-practice secrets management.

Core Features & Use Cases

• Implement CSRF protection, Content Security Policy, and HSTS across Next.js routes and API handlers.
• Enforce Row-Level Security, parameterized queries, input validation, and MFA in authentication flows to harden access controls.
• Provide security audit checklists, safe default configurations, and remediation patterns for rapid risk reduction in web apps.

Quick Start

Implement OWASP-aligned mitigations across your Next.js and Supabase stack and start enforcing CSP, CSRF protection, and secure authentication immediately.