skills.rest
ScientiaCapital
ScientiaCapitalCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security

Implement web application security patterns for Supabase, Next.js, and Python backends.

28|3|Updated Dec 10, 2025
Search Tags:#security#authentication#rls#validation#owasp#secrets#csp
One-click install
npx skills add https://github.com/ScientiaCapital/skills --skill security-scientiacapital
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/ScientiaCapital/skills/tree/main/active/security-skill
Command: npx skills add https://github.com/ScientiaCapital/skills --skill security-scientiacapital

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Application security is often an afterthought; this skill consolidates authentication, secrets management, input validation, and OWASP Top 10 practices into actionable patterns.

Core Features & Use Cases

  • Authentication patterns, including short-lived tokens, secure storage, and MFA guidance for modern web apps.
  • Secrets management and input validation, covering startup validation, rotation, and defensive logging practices.
  • Input validation, CSP, and RLS usage to enforce data integrity and access control in web stacks like Supabase, Next.js, and Python backends.

Quick Start

Apply these security patterns to your web app today to strengthen authentication, secrets management, and input validation.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OWASP Top 10 controls for a Supabase and Next.js application?▼

You enforce RLS in Supabase by applying specific row-level security patterns to restrict data access, ensuring that policies are strictly validated alongside input validation and defensive logging practices.

What is the best way to manage secrets validation and token rotation in Python backends?▼

Secrets management in Python backends requires startup validation to verify availability, short-lived token implementation with rotation, and defensive logging discipline to prevent sensitive data exposure.

How do I configure Content Security Policy (CSP) headers for Next.js?▼

Configuring CSP headers for Next.js involves implementing specific security patterns that define resource loading rules to prevent cross-site scripting and data injection attacks.

Can I use these security patterns to enforce Row Level Security (RLS) in Supabase?▼

You enforce RLS in Supabase by applying specific row-level security patterns to restrict data access, ensuring that policies are strictly validated alongside input validation and defensive logging practices.

What are the limitations of relying solely on short-lived tokens for authentication?▼

Short-lived tokens require rotation and secure storage mechanisms to be effective, and relying solely on them without MFA guidance, startup secret validation, and comprehensive logging leaves security gaps.

Related Skills

Explore More Software Engineering Skills→
tadokoro-ryusuketadokoro-ryusuke

project-guidelines

Organize project setup with templates, guidelines, and environment configuration patterns.

Community
Intermediate
mind-systemsmind-systems

aif-security-checklist

Audit software projects against OWASP Top 10 security controls.

Official
Advanced
etylsarinetylsarin
59

security-hardening

Implement authentication, authorization, CSP, input validation, and RLS policies.

Community
Advanced
foxj77foxj77
18

external-secrets-troubleshooting

Diagnose and repair External Secrets Operator synchronization failures in Kubernetes clusters.

Community
Advanced