Claude Code
Codex
Cursor
GitHub Copilot
Gemini CLIAbout this skill
Audit every trust boundary for unvalidated input, injection, and forged-request gaps, then produce a phased hardening plan. Use when the user says "validate my inputs", "is my app injection-safe", "check my forms", "XSS", "dangerouslySetInnerHTML", "my Stripe webhook", "can someone forge requests", or is hardening before launch. AI code has happy-path bias: missing Zod, dangerouslySetInnerHTML without DOMPurify, webhook signature gaps (empty or unchecked signing secrets), raw-body signature mistakes, missing idempotency. Stack-aware for Supabase, Stripe, Next.js. Plan only until each phase is approved. Pairs with plan-rls-audit, plan-security-audit, audit-fe-api. Do NOT use for row access (plan-rls-audit) or secrets (plan-secrets-audit).
Quick start
- Copy the install prompt. Use the green button above this README.
- Send it to your agent. Paste it into your coding agent’s chat and send.
- Review the setup. Your agent checks the skill’s instructions, requirements, and installation scope.
Review, license & listing details
This is an imported listing. We haven’t certified its safety, license, or compatibility. Skills may include executable scripts.
Only SKILL.md was scanned. Supporting files and scripts were not checked. No safety grade has been assigned.
0 potential findings · Scanned 11/4/2026 · Scanner 0.2.1
Content SHA-256: 86411f4d89d9378473ffccda80d7180aa0dd002818940f7cb287df1bac0fe35c
About this listing
- Category
- Security
- Reported license
- MIT
- Listing language (estimated)
- English
- Review status
- Not individually reviewed
- Agent compatibility
- Atlas installation supports Claude Code, Codex, and Cursor. Skill-specific dependencies and features are checked during setup.