securix

Audit TypeScript/Next.js/Supabase applications for OWASP Top 10 security gaps.

1|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/dduquenne/unanima-platform --skill securix
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: securix
Source: https://github.com/dduquenne/unanima-platform/tree/main/.claude/skills/securix
Command: npx skills add https://github.com/dduquenne/unanima-platform --skill securix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams enforce security-by-design across TypeScript/Next.js/Supabase apps, preventing data leaks and security incidents by guiding architecture, inputs, and deployments.

Core Features & Use Cases

  • Security-by-design posture across the stack (validation, CSP, headers, secret management)
  • Server-side authorization and RBAC enforcement with RLS and audits
  • Comprehensive threat coverage (OWASP Top 10, API security, secrets, dependencies)
  • Reference-guided hardening and deployment best practices

Quick Start

Audit a Next.js application for security gaps and request actionable remediations.

Frequently Asked Questions about securix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure a Next.js and Supabase application against the OWASP Top 10?

To secure a Next.js and Supabase application against the OWASP Top 10, enforce security-by-design principles including server-side authorization checks, strict Row Level Security (RLS) policies, input validation, and CSP headers.

What is the best way to manage secrets and API security in a TypeScript stack?

The best way to manage secrets and API security in a TypeScript stack is by applying security-by-design principles, ensuring proper secret handling, implementing rate limiting, and conducting regular dependency audits.

How do I enforce server-side authorization and Row Level Security policies with Supabase?

You enforce server-side authorization and Row Level Security (RLS) policies with Supabase by applying strict RLS rules and conducting audits to ensure data access is properly restricted across your application architecture.

Can I audit my TypeScript project for security gaps and get actionable remediations?

Yes, you can audit a TypeScript project for security gaps to receive actionable remediations, covering threat protection like dependency auditing, Content Security Policy (CSP) configuration, and secure deployment best practices.

Why do I need Content Security Policy headers and input validation for my business apps?

You need Content Security Policy (CSP) headers and input validation for business apps to prevent data leaks and security incidents by ensuring comprehensive threat coverage and protecting against malicious inputs.