security

Audit FastAPI and Next.js stacks for security weaknesses with remediation steps.

Updated Dec 14, 2025
One-click install
npx skills add https://github.com/toobutta/maptelli --skill security-toobutta
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/toobutta/maptelli/tree/main/.claude/skills/security
Command: npx skills add https://github.com/toobutta/maptelli --skill security-toobutta

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a structured, OWASP-aligned security audit of the Maptelli platform, identifying weaknesses across backend APIs, frontend, and infrastructure to reduce risk exposure.

Core Features & Use Cases

  • End-to-end phase-based assessment covering FastAPI, SQLAlchemy, PostGIS, Redis, Celery, and Next.js stacks.
  • Checks for authentication/authorization gaps, input validation, CORS misconfigurations, token handling, secrets exposure, and dependency vulnerabilities.
  • Practical remediation guidance with concrete code/config changes and prioritized risk scoring.

Quick Start

Run a full security review against the current deployment and generate a remediation plan.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run an OWASP-aligned security audit on a FastAPI and Next.js stack?

Run an OWASP-aligned security audit by assessing backend endpoints, frontend code, and infrastructure in phases. The audit identifies authentication gaps, input validation flaws, and CORS misconfigurations, providing concrete remediation steps and risk scoring.

Can this security audit check Google Ads OAuth token handling and secrets management?

Yes, the security audit thoroughly checks Google Ads OAuth token handling and secrets management. It identifies secrets exposure and verifies token handling best practices to ensure sensitive credentials are protected across the application stack.

What is the best way to prevent SQL injection in SQLAlchemy ORM and PostGIS queries?

Prevent SQL injection by auditing ORM safety and parameter validation within the SQLAlchemy and PostGIS layers. The security assessment identifies unsafe query patterns and provides practical remediation steps to enforce secure database interactions.

How does this security review evaluate Redis caching and Celery task vulnerabilities?

The security review evaluates Redis caching and Celery tasks by inspecting their configurations and execution patterns for weaknesses. It checks for misconfigurations and insecure task handling, then outputs prioritized risk scores with remediation guidance.

Does the audit generate a remediation plan with concrete code and configuration changes?

Yes, the audit generates a remediation plan featuring concrete code and configuration changes. It delivers practical remediation guidance alongside prioritized risk scoring to systematically reduce risk exposure across the platform.