skills.rest
shaitamam-80
shaitamam-80COMMUNITY
Explore all skills by this author →
GitHub

security-specialist

Identify and remediate security gaps in web applications and APIs.

Updated Dec 14, 2025
Search Tags:#security#authentication#rls#input-validation#secrets-management#web-app#apis
One-click install
npx skills add https://github.com/shaitamam-80/-Find-My-Journal- --skill security-specialist
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-specialist
Source: https://github.com/shaitamam-80/-Find-My-Journal-/tree/main/.claude/skills/security-specialist
Command: npx skills add https://github.com/shaitamam-80/-Find-My-Journal- --skill security-specialist

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security gaps in web apps and APIs create risk and cost. This Skill provides clear, actionable guidance to protect applications from common threats and to enforce robust access controls, secrets handling, and secure configurations.

Core Features & Use Cases

  • OWASP Top 10 overview and threat modeling guidance for web apps and APIs
  • Secrets management, API key hygiene, and environment isolation
  • Access control, RLS guidance, and robust authentication best practices
  • Input validation, secure coding practices, and HTTPS/encryption basics
  • Safe AI usage guidelines for Claude Code during security reviews

Quick Start

Ask me to review your project's security posture and I will identify gaps, recommend controls, and provide concrete steps.

Frequently Asked Questions about security-specialist

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and remediate security gaps in my web app and APIs?▼

To identify security gaps in your web app and APIs, you need to review authentication settings, RLS policies, input validation, and secrets management. This skill provides actionable guidance to remediate vulnerabilities and enforce robust access controls and data encryption.

What is the best way to manage API keys and secrets in a Supabase and FastAPI project?▼

The best way to manage API keys and secrets is by enforcing strict API key hygiene and environment isolation. This skill provides practical checks to secure your Supabase and FastAPI configurations and safely handle sensitive data.

How does Row Level Security (RLS) work for access control in Supabase?▼

Row Level Security (RLS) works by enforcing database-level access controls based on user authentication. This skill offers RLS guidance to help you configure proper access control and secure data retrieval within your web applications.

Can I use this to enforce server-side input validation and safe AI usage guidelines?▼

Yes, you can use this skill to enforce server-side input validation and safe AI usage guidelines. It covers secure coding practices and provides specific rules for safe AI usage during Claude Code security reviews.

Does this skill cover OWASP Top 10 threat modeling for web applications?▼

Yes, this skill covers the OWASP Top 10 overview and threat modeling guidance for web apps and APIs. It helps you identify common threats and implement robust access controls, HTTPS, and data encryption.

Related Skills

Explore More Software Engineering Skills→
gugug168gugug168

project-guidelines-example

Document architecture, code patterns, testing, and deployment for fullstack applications.

Community
Intermediate
etylsarinetylsarin
59

security-hardening

Implement authentication, authorization, CSP, input validation, and RLS policies.

Community
Advanced
xlelibertyxleliberty

senior-secops

Automate security scanning, CVE assessment, and compliance verification for software projects.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

security

Scan code, containers, and infrastructure for security vulnerabilities.

Community
Advanced