Browse The Skill Store

Prevent vulnerabilities before they happen by forcing early security framing and secure-by-default design patterns.

🛡️ Supabase RLS Doctor

by JustHandled Labs

$19

Audit local Supabase SQL, migrations, policies, storage rules, and client code for RLS gaps, broad policies, service-role leakage, overbroad grants, and tenant-isolation mistakes. Get severity-ranked evidence, proposed fixes, and verification steps without connecting to or changing the live project.

Audit SQL and ORM queries for security vulnerabilities, N+1 performance issues, and indexing anti-patterns.

🛡️OpenAPI Contract Guard

by JustHandled Labs

$12

Lint an OpenAPI spec and diff two versions to catch breaking API changes before they reach consumers. Within a spec it flags missing operationId, success responses with no schema, untyped parameters, operations with no security requirement, and unbounded arrays/strings. Across two versions it flags removed paths and operations, removed response codes, a parameter becoming required, narrowed parameter types, removed enum values, and removed response fields. Analyzes JSON specs (convert YAML to JSON first).

nex whatsapp business notify

by Nex AI

Free

Enterprise-grade WhatsApp Business Cloud API integration for Python with session window management and webhook security.

Auth System Designer

by StrategistKit

$9.99

Produces an authentication and authorization architecture — session vs token choice, RBAC model, tenant isolation, and token refresh design. Use when the user says "design our auth system", "choose session vs JWT", "design an RBAC permission model", or "set up multi-tenant auth". Do not use when the user wants API contract or rate-limiting design, not the auth architecture itself.

Senior Web App Architect for Coding Agents

by Avesta Agency Australia | Software Engineering Group

$9.99

Messy, insecure, unfixable — that's what AI builds without architecture. This file is the architecture: 10 years of senior judgement on rendering, caching, security and SEO, so your agent builds it right from day one.

AI Prompt Injection Defense Shield & LLM Jailbreak Security Auditor Code Review Agent

by Brandon DeVries

Free

Stop leaving your AI startup exposed to malicious users trying to steal your proprietary system prompts or bypass your paywalls. The AI Prompt Injection Defense Shield is an automated code review agent that deeply analyzes your Next.js or Python backend, instantly detecting insecure LLM input fields, un-sanitized API data streams, and weak prompt boundaries. By automatically generating the exact copy-paste code patches required to harden your AI wrapper against the latest OWASP top 10 LLM vulnerabilities, this skill allows solo developers and indie hackers to confidently launch their SaaS without the fear of massive, unexpected API billing spikes or catastrophic data leaks.

nex webhook handler pattern

by Nex AI

Free

Generate production-grade, idempotent FastAPI webhook handlers with signature verification and audit logging.

Webhook Reliability Auditor

by heyhridyansh

$14.99

Production-grade reliability and security audit for inbound and outbound webhook integrations.

Automatically add secure webhook integrations to existing apps.

Automatically add reliable error handling to existing applications.

Automatically add login authentication to existing apps.

Automatically add secure audit logging to existing applications.

Repair file-upload drift across validation, object keys, authorization, quarantine, scanning, finalization, retries, downloads, cleanup, tests, and docs.

Repair session revocation gaps that leave JWTs, refresh tokens, cookies, WebSockets, or cached authorization usable after logout or suspension.

Automatically add role-based permissions to existing apps.

Repair webhook-signature contract drift in a repository using Cursor.

Repair cache bugs that expose one customer’s data to another tenant or return stale results after writes.

Repair invitation lifecycle drift across tenant scope, tokens, roles, expiry, resend, revoke, acceptance, account linking, and retries.

Audits API designs for OWASP Top 10 risks with severity scoring and concrete remediation checklists.