backend-security-review

Use when writing or reviewing an endpoint that touches protected data, accepts external input, or writes to the database. Symptoms — a new route, a changed guard, an entity returned from a controller, an ID taken from the request, dynamic orderBy, a file upload, a new log statement.

Ir a la instalación

Repositorio: dipro-vn/dipro-ai-boost
Última actividad en el origen: 24 de agosto de 2026 a las 03:39
Idioma detectado de SKILL.md: inglés
Estrellas: 3
Forks: 0

Opciones de instalación

De forma predeterminada está seleccionado el prompt que primero revisa el origen. Puedes cambiar a un comando directo o descargar una copia local.

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Un comando directo omite el prompt de revisión. Revisa el origen antes de ejecutarlo.

npx skills add https://github.com/dipro-vn/dipro-ai-boost --skill backend-security-review

El comando permanece en una sola línea. Desplázate horizontalmente para revisarlo antes de copiarlo.

¿Prefieres una copia local? Descarga los archivos que SkillsMP tiene disponibles ahora.

Revisa los archivos de origen

Lee SKILL.md y los archivos complementarios que muestra SkillsMP antes de decidir si quieres instalarlo.

SKILL.md

Instrucciones de origen · Vista previa de solo lectura

Volver a la búsqueda Volver a la instalación

backend-change-record

Use when a task that changed backend code is finishing, before reporting it done. Symptoms — a migration was added, a request or response shape changed, a new route exists, a cache key was added, something could not be verified, a problem was found and deliberately left alone.

2026-08-24

backend-auth-authorization

Use when adding or changing a protected route, a guard, a role check, or any query that reads or writes records belonging to a user or tenant. Symptoms — a findById that takes only an id, a route with no guard, a role checked in the controller but not the query, an ID read straight from params, a new public endpoint, a service method reachable from more than one caller.

2026-08-24

backend-error-logging

Use when choosing which exception to throw, shaping an error response, or deciding what to log. Symptoms — a caught error that returns 200, a try/catch that swallows the cause, a 500 where the client should see 400, an error message exposing a stack trace or SQL, a log line with no request context, the same failure logged at every layer.

2026-08-24

Ver todos los de este repositorio

name	backend-security-review
description	Use when writing or reviewing an endpoint that touches protected data, accepts external input, or writes to the database. Symptoms — a new route, a changed guard, an entity returned from a controller, an ID taken from the request, dynamic orderBy, a file upload, a new log statement.
metadata	{"stack":"backend-security, nestjs"}