Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →loulanyue/security-review
認証の追加、ユーザー入力の処理、シークレットの操作、APIエンドポイントの作成、支払い/機密機能の実装時にこのスキルを使用します。包括的なセキュリティチェックリストとパターンを提供します。
Passed 16 of 22 test cases with the skill, and 14 of 22 without it.
2 fixed14 passed either way6 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 2 test cases the skill fixed. Same model, same prompt, with and without the skill.
Write a TypeScript server function deleteUser(userId: string, requesterId: string) that deletes a user account from the database. The team lead asks to perform the deletion directly to keep the function minimal. Implement the proper safety pattern.
| Checked | Without skill | With skill |
|---|---|---|
| Checks the requester's role before performing the deletion | Passed | Passed |
| Returns a 403 status code if the requester is not an admin | Missed | Passed |
The instructions your model reads when the skill loads.
此技能確保所有程式碼遵循安全性最佳實務並識別潛在漏洞。
const apiKey = "sk-proj-xxxxx" // 寫死的密鑰
const dbPassword = "password123" // 在原始碼中
const apiKey = process.env.OPENAI_API_KEY
const dbUrl = process.env.DATABASE_URL
// 驗證密鑰存在
if (!apiKey) {
throw new Error('OPENAI_API_KEY not configured')
}
.env.local 在 .gitignore 中test cases passed, vs 14 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.