Sato Hub
← Skills

security-reviewskills.sh · affaan-m

5,629 installs

Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.

Executes fetched or decoded codeReads secret paths (~/.ssh, .env …)
Hosts contacted: owasp.orgnextjs.orgsupabase.comportswigger.net
Credentials it expects: OPENAI_API_KEY
Evidence lines
  • executes_fetched_code — SKILL.md: script-src 'self' 'unsafe-eval' 'unsafe-inline';
  • reads_secret_paths — SKILL.md: - [ ] `.env.local` in .gitignore

Our disclosure is a static description of what the skill declares and does; it is not a safety verdict. Source record: www.skills.sh/affaan-m/ecc/security-review.

Install

npx skills add affaan-m/ecc@security-review

Copied from the registry's documented install form. Read the disclosure above first; it is the whole point of this page.

Observed record

First seen 2026-10-19. The weekly re-scan will record install growth and any change to the skill's content hash; one observation so far.

Cite this page

Sato Hub. "security-review — skill disclosure on Sato Hub." Sato Hub, updated 2026-10-23, accessed 2026-10-23. https://satohub.ai/skills/skillssh%3Aaffaan-m%2Fecc%2Fsecurity-review

Data last refreshed 2026-10-23; this page is rebuilt daily. Citations carry the date so a reader can tell which snapshot a claim came from. Catalog data is licensed CC-BY-4.0.