skills.rest
machenjie
machenjieCOMMUNITY
Explore all skills by this author →
GitHub

security-privacy-gate

Review application and infrastructure changes for security and privacy regressions.

4|Updated May 16, 2026
Search Tags:#security review#injection prevention#privacy by design#ai prompt injection#idonly authorization#owasp api security#ssrf mitigation
One-click install
npx skills add https://github.com/machenjie/rd-skills --skill security-privacy-gate
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-privacy-gate
Source: https://github.com/machenjie/rd-skills/tree/main/src/professional-skills/security-privacy-gate
Command: npx skills add https://github.com/machenjie/rd-skills --skill security-privacy-gate

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It prevents security and privacy regressions by forcing rigorous review of trust boundaries, authorization depth, injection risks, secrets handling, dependency CVEs, privacy obligations, AI prompt injection, and Web3 asset custody before code ships.

Core Features & Use Cases

  • Security & Privacy Regression Review: Evaluates authentication/authorization, object-level access control (IDOR), input validation, output encoding, and injection vectors (SQLi, XSS, SSRF, RCE).
  • Injection and AI/LLM Trust-Boundary Checks: Assesses prompt injection risk and enforces the rule that LLM outputs are untrusted when they influence actions.
  • Dependency, Compliance, and Cloud Governance Validation: Requires CVE scanning for new/updated dependencies and flags IAM/exposure/KMS changes that expand effective permissions or public access.

Quick Start

Use the security-privacy-gate skill to review your change and return a Block/Approve decision with the specific Critical/High fixes required before merge.

Frequently Asked Questions about security-privacy-gate

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent IDOR vulnerabilities during code review?▼

Preventing IDOR vulnerabilities involves enforcing object-level authorization with cross-user tests during security review. You validate that access controls verify permissions for every specific object requested, blocking unauthorized cross-user data access.

How does prompt injection mitigation work for LLM integrations?▼

Prompt injection mitigation works by treating LLM outputs as untrusted data across trust boundaries. You enforce safe tool handling so AI-generated content cannot trigger unauthorized actions or bypass security controls.

What is SSRF mitigation and how do I validate URL allowlisting?▼

SSRF mitigation enforces URL allowlisting to validate that server-side requests only hit approved destinations. You block unauthorized external calls during security review to prevent internal network exposure.

Does this security review work for cloud IAM and KMS exposure changes?▼

Yes, this security review works for cloud IAM and KMS exposure changes. It flags modifications that expand effective permissions or public access, ensuring infrastructure changes maintain strict access governance and compliance.

Can I use this to check dependency CVEs before merging new packages?▼

Yes, you can use this to check dependency CVEs before merging. It requires CVE scanning for new or updated dependencies, blocking merges if critical vulnerabilities are detected in the added packages.

Related Skills

Explore More Legal & Compliance Skills→
mvillmowmvillmow
18

scan-vulnerabilities

Detect security vulnerabilities in code and dependencies with static analysis.

Community
Intermediate
PaulKinlanPaulKinlan
2

dependency_audit

Audit npm and pip dependencies for vulnerabilities and license compliance.

Community
Intermediate
zardusai-cyberzardusai-cyber
1

security-review

Identify and remediate security vulnerabilities across authentication, input validation, secrets, APIs, and deployments.

Community
Advanced
kaustubhhiwarekaustubhhiware

security-reviewer

Audit code and cloud configurations for security vulnerabilities.

Community
Advanced