rule-securitylisted

Security rules this project always applies: secret handling, input validation, parameterized queries, and Supabase RLS. Load before writing code that touches credentials, user input, queries, or auth.
djnsty23/claude-auto-dev · ★ 3 · API & Backend · score 61

Install: claude install-skill djnsty23/claude-auto-dev

- Never commit .env, API keys, credentials - Validate user input with Zod - Use parameterized queries - Supabase: RLS policies required, secrets in Edge Functions only - Test edge functions after deploy (curl with real params, verify response) - Verify bulk changes eliminated the old pattern completely (grep for remnants)