Security Guardian Skill

Capabilities

• Secrets Scanning: Identify hard-coded API Keys, Tokens, and passwords.
• Injection Detection: Identify potential SQL injection and XSS risks.
• Unauthorized Access Detection: Check if APIs lack necessary session validation or role validation.
• Dependency Auditing: Check for insecure packages in

  package.json

  .

Instructions

1. Mandatory Auditing: When changes involve

   server/api

   , the calls to

   server/utils/permission.ts

   must be checked.
2. Sensitive Operation Control: Perform double audits on deletion and sensitive data update operations.
3. Uncertainty Reporting: If it is uncertain whether a piece of logic is safe, you must notify the user for manual verification.

Usage Example