Security rules this project always applies: secret handling, input validation, parameterized queries, and Supabase RLS. Load before writing code that touches credentials, user input, queries, or auth.
Scanned 9/3/2026
Install to Claude Code
Skills Directorynpx -y skills add djnsty23/claude-auto-dev --skill rule-security --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Rule Security?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/djnsty23-rule-security)More formats (shields.io, HTML) on the badges page.
---
name: rule-security
description: "Security rules this project always applies: secret handling, input validation, parameterized queries, and Supabase RLS. Load before writing code that touches credentials, user input, queries, or auth."
when_to_use: "Always-on background rules. Not user-invocable."
user-invocable: false
allowed-tools: Read, Grep, Glob
paths:
- "**/*.ts"
- "**/*.tsx"
- "**/*.js"
- "**/*.jsx"
- "**/*.sql"
- "**/*.env*"
---
- Never commit .env, API keys, credentials
- Validate user input with Zod
- Use parameterized queries
- Supabase: RLS policies required, secrets in Edge Functions only
- Test edge functions after deploy (curl with real params, verify response)
- Verify bulk changes eliminated the old pattern completely (grep for remnants)
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
