skills.rest
MoriwakiYusuke
MoriwakiYusukeCOMMUNITY
Explore all skills by this author →
GitHub

security-review

Enforce Anarchy security principles during pull request reviews.

Updated Feb 6, 2026
Search Tags:#security review#anonymity#client-side crypto#PR checklist#Tor enforcement#session-only keys#X-Chain-Auth
One-click install
npx skills add https://github.com/MoriwakiYusuke/anarchy --skill security-review-moriwakiyusuke
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/MoriwakiYusuke/anarchy/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/MoriwakiYusuke/anarchy --skill security-review-moriwakiyusuke

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams prevent security regressions in Anarchy by providing a concrete checklist for reviewing changes that could break anonymity, key safety, encryption boundaries, proof-of-work behavior, or lightweight chain authentication.

Core Features & Use Cases

  • PR security verification checklist for enforcing Anarchy’s non-negotiable protocol principles during reviews.
  • Targeted checks across the stack covering Tor/I2P transport enforcement, session-only secret key handling, client-side-only cryptography, foreground PoW enforcement, and X-Chain-Auth request signing.
  • Review guardrails for new blockchain/RPC/extrinsic/storage work including bounded inputs, replay resistance, rate limiting, overflow safety, and event/error naming consistency.
  • Incident response guidance for key leaks or protocol defects, including private reporting and mitigation via governance/runtime upgrade.

Quick Start

Use this checklist to review a pull request that modifies front-end encryption, key management, node RPC/storage endpoints, or runtime extrinsics in the Anarchy repository.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review a PR for Tor enforcement and client-side crypto regressions?▼

To review a PR for Tor enforcement and client-side crypto regressions, apply a deterministic checklist validating forbidden patterns, bounded inputs, and client-side-only key boundaries to ensure anonymity is preserved.

What security checks are needed for new blockchain extrinsics and RPC additions?▼

Security checks for new extrinsics and RPC additions require validating bounded inputs, replay resistance, rate limiting, overflow-safe arithmetic, and information-leak resistant error handling to prevent protocol defects.

How does X-Chain-Auth request signing protect storage-node API endpoints?▼

X-Chain-Auth request signing protects storage-node API endpoints by enforcing lightweight chain authentication during PR review, verifying that all new endpoint changes implement proper request signing protocols.

When do I need to verify foreground PoW limits and session-only key handling?▼

You need to verify foreground PoW limits and session-only key handling when a pull request modifies stealth or DM key managers, encrypted backups, or reaction mining behavior within the Anarchy repository.

What is the incident response guidance for secret key leaks in an anonymity network?▼

Incident response guidance for secret key leaks involves private reporting and mitigation via governance or runtime upgrade, ensuring that exposed client-side keys and compromised protocol boundaries are securely remediated.

Related Skills

Explore More Legal & Compliance Skills→
MoriwakiYusukeMoriwakiYusuke

dev-command

Reference build, test, and run commands for the Anarchy monorepo.

Community
Intermediate
DIGI-UWDIGI-UW

openelis-test-catalog-qa

Automate browser-based QA testing for OpenELIS Global with Playwright and generate pass/fail reports.

Official
Advanced
SuperlendSuperlend

constant-time-analysis

Detect timing side-channel vulnerabilities in compiled assembly and bytecode outputs.

Official
Advanced
CJCreator-NewCJCreator-New

hims-security-companion

Review code and architecture for OWASP Top 10 and healthcare-specific security vulnerabilities.

Community
Advanced