Ejecuta cualquier Skill en Manus
con un clic

Ejecuta cualquier Skill en Manus con un clic

Comenzar

security-review

Estrellas3

Forks0

Actualizado4 de marzo de 2026 a las 15:36

Run a security audit covering OWASP Top 10, deps, secrets, auth

Instalación

Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.

Ejecutar en Manus

Fuente

YanCheng-go

YanCheng-go/danskprep

Abrir repositorio de GitHub Ver repositorios del creador

Descarga

Ejecutar en Manus

Ocupaciones relacionadasSOC

Basado en la clasificación ocupacional SOC

Analistas de seguridad de la informaciónOcupaciones informáticas y matemáticas·SOC 15-1212

SKILL.md

readonly

name	security-review
description	Run a security audit covering OWASP Top 10, deps, secrets, auth
user-invocable	true

/security-review — Security Audit

Checks

1. Secret Scanning

Grep for patterns that should never be in code:

API keys, tokens, passwords in source files
.env files committed to git
Hardcoded credentials in config

2. Dependency Vulnerabilities

npm audit

Flag: CRITICAL and HIGH severity.

3. Auth & Authorization

RLS enabled on all user-data tables (if using Supabase/Postgres)
UPDATE policies have WITH CHECK (not just USING)
No privilege escalation paths

4. Client-Side Security

No secrets in localStorage or client-side code
No dangerouslySetInnerHTML without sanitization
No eval(), innerHTML, or new Function() with user input
CSP headers configured

5. Environment Variables

No VITE_ prefixed secrets (these are exposed to the client)
Service keys only used server-side
.env.example doesn't contain real values

6. Input Validation

User input validated at system boundaries
No SQL injection vectors (parameterized queries)
No XSS vectors (proper escaping)

Output Format

#	Severity	Category	Finding	File	Recommendation
1	CRITICAL	...	...	...	...

Severity: CRITICAL / HIGH / MEDIUM / LOW / INFO

Más de este repositorio

mismo repositorio

backlog

YanCheng-go/danskprep

Manage the project backlog — add, list, filter, update, prioritize, and suggest work items

2026-03-053

daily

YanCheng-go/danskprep

Daily session wrapper — start with backlog, work, commit, retro

2026-03-053

retro

YanCheng-go/danskprep

End-of-session retrospective — summarize work, update backlog statuses, update MEMORY.md

2026-03-053

commit

YanCheng-go/danskprep

Commit, branch, PR, self-review, fix — then stop for human approval before merge

2026-03-053

parallel

YanCheng-go/danskprep

Pre-flight for parallel work — pick items, check file overlap, set statuses, generate terminal commands

2026-03-053

backlog

YanCheng-go/danskprep

Manage project backlog — add, list, filter, update, prioritize, suggest

2026-03-043

name	security-review
description	Run a security audit covering OWASP Top 10, deps, secrets, auth
user-invocable	true

/security-review — Security Audit

Checks

1. Secret Scanning

Grep for patterns that should never be in code:

API keys, tokens, passwords in source files
.env files committed to git
Hardcoded credentials in config

2. Dependency Vulnerabilities

npm audit

Flag: CRITICAL and HIGH severity.

3. Auth & Authorization

RLS enabled on all user-data tables (if using Supabase/Postgres)
UPDATE policies have WITH CHECK (not just USING)
No privilege escalation paths

4. Client-Side Security

No secrets in localStorage or client-side code
No dangerouslySetInnerHTML without sanitization
No eval(), innerHTML, or new Function() with user input
CSP headers configured

5. Environment Variables

No VITE_ prefixed secrets (these are exposed to the client)
Service keys only used server-side
.env.example doesn't contain real values

6. Input Validation

User input validated at system boundaries
No SQL injection vectors (parameterized queries)
No XSS vectors (proper escaping)

Output Format

#	Severity	Category	Finding	File	Recommendation
1	CRITICAL	...	...	...	...

Severity: CRITICAL / HIGH / MEDIUM / LOW / INFO