securix

Audit TypeScript/Next.js/Supabase applications for OWASP Top 10 security gaps.

1|Updated Mar 10, 2026
One-click install
npx skills add https://github.com/dduquenne/unanima-platform --skill securix
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: securix
Source: https://github.com/dduquenne/unanima-platform/tree/main/.claude/skills/securix
Command: npx skills add https://github.com/dduquenne/unanima-platform --skill securix

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams enforce security-by-design across TypeScript/Next.js/Supabase apps, preventing data leaks and security incidents by guiding architecture, inputs, and deployments.

Core Features & Use Cases

  • Security-by-design posture across the stack (validation, CSP, headers, secret management)
  • Server-side authorization and RBAC enforcement with RLS and audits
  • Comprehensive threat coverage (OWASP Top 10, API security, secrets, dependencies)
  • Reference-guided hardening and deployment best practices

Quick Start

Audit a Next.js application for security gaps and request actionable remediations.

Frequently Asked Questions about securix

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure a Next.js and Supabase application against the OWASP Top 10?▼

To secure a Next.js and Supabase application against the OWASP Top 10, enforce security-by-design principles including server-side authorization checks, strict Row Level Security (RLS) policies, input validation, and CSP headers.

What is the best way to manage secrets and API security in a TypeScript stack?▼

The best way to manage secrets and API security in a TypeScript stack is by applying security-by-design principles, ensuring proper secret handling, implementing rate limiting, and conducting regular dependency audits.

How do I enforce server-side authorization and Row Level Security policies with Supabase?▼

You enforce server-side authorization and Row Level Security (RLS) policies with Supabase by applying strict RLS rules and conducting audits to ensure data access is properly restricted across your application architecture.

Can I audit my TypeScript project for security gaps and get actionable remediations?▼

Yes, you can audit a TypeScript project for security gaps to receive actionable remediations, covering threat protection like dependency auditing, Content Security Policy (CSP) configuration, and secure deployment best practices.

Why do I need Content Security Policy headers and input validation for my business apps?▼

You need Content Security Policy (CSP) headers and input validation for business apps to prevent data leaks and security incidents by ensuring comprehensive threat coverage and protecting against malicious inputs.