security-review

Audit Night-Orch security for token handling, worker isolation, prompt injection defenses, and logging redaction.

Updated Mar 22, 2026
One-click install
npx skills add https://github.com/shllg/night-orch --skill security-review-shllg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-review
Source: https://github.com/shllg/night-orch/tree/main/.claude/skills/security-review
Command: npx skills add https://github.com/shllg/night-orch --skill security-review-shllg

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a thorough security audit for Night-Orch, addressing potential vulnerabilities in token handling, worker isolation, and prompt injection.

Core Features & Use Cases

  • Token Flow Audit: Verifies secure handling of GitHub/Forgejo tokens and other sensitive credentials.
  • Worker Environment Isolation: Ensures that worker processes are isolated and do not expose sensitive information.
  • Prompt Injection Defense: Safeguards against prompt injection attacks by sanitizing issue content and outputs.
  • Pino Redaction: Configures the logger to redact sensitive information from logs.
  • Use Case: Use this Skill to regularly audit Night-Orch's security, ensuring that your issue management process is secure against common threats.

Quick Start

Run the security-review skill to audit Night-Orch's security.

Frequently Asked Questions about security-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure GitHub tokens in an issue management system?

To secure GitHub tokens in an issue management system, you can perform a token flow audit using this skill to verify the safe handling of sensitive credentials. It systematically checks token handling processes to prevent unauthorized exposure.

What is the best way to defend against prompt injection in issue content?

Defending against prompt injection in issue content involves sanitizing inputs and outputs to block malicious commands. This skill safeguards your environment by auditing issue management systems and applying prompt injection defenses.

How do I redact sensitive information from Pino logs?

To redact sensitive information from Pino logs, configure the logger to mask credentials during the security audit process. This skill validates Pino redaction settings to ensure sensitive data is omitted from your logs.

How do I verify worker environment isolation for background processes?

Verifying worker environment isolation involves auditing worker processes to ensure they do not expose sensitive information. This skill checks worker isolation boundaries to confirm background tasks operate securely without data leakage.

Does this security audit support issue management systems like Night-Orch?

Yes, this security audit specifically supports issue management systems like Night-Orch. It is designed to check Night-Orch deployments for secure token handling, worker isolation, prompt injection defenses, and logging redaction.