Security Guardian

What it does

The Security Guardian skill proactively identifies and mitigates potential security threats through real-time analysis and automated response actions. It focuses on detecting vulnerabilities like hardcoded secrets (API keys, tokens, passwords), SQL injection and XSS risks, authorization bypasses, and insecure dependencies within package.json files. This skill is designed to help ensure the security of server-side code and APIs.

When to use it

• When making changes to servers or APIs, particularly when modifying server/utils/permission.ts.
• Before deploying applications with sensitive data handling capabilities.
• During audits of login logic or other critical operations.
• For reviewing code that involves deletion or updates of sensitive data.
• To proactively identify and address potential security vulnerabilities in dependencies.

Key capabilities

• Secrets Scanning: Detects hardcoded API keys, tokens, and passwords.
• Injection Detection: Identifies SQL injection and XSS risks.
• Authorization Check: Verifies proper session and role validation for APIs.
• Dependency Audit: Checks package.json files for insecure packages.
• Double Auditing: Requires a second review for deletion or sensitive data update operations.

Example prompts

• "Review this login logic." (The skill will check for secure hashing, rate limiting, and password logging.)
• "Scan the codebase for hardcoded API keys."
• "Audit package.json for vulnerable dependencies."

Tips & gotchas

• For server/API changes, it's mandatory to check calls within server/utils/permission.ts.
• If the skill is uncertain about a code segment’s security, it will report this so that a human can manually verify.
• This skill focuses on identifying potential vulnerabilities; manual verification and remediation are often required.