toss-edge-hardening

What problem does it solve?

Edge Function security vulnerabilities where authorization decisions rely on caller headers or incomplete checks, risking privilege escalation. This Skill enforces JWT-based authorization, removes trust in caller-provided headers, and validates post-patch behavior via redeploys and runtime checks.

Core Features & Use Cases

• Enforces per-function minimum permissions via JWT claims rather than headers.
• Patches edge functions and validates re-deployment with evidence trails (edge logs).
• Performs runtime verification by replaying requests and ensuring non-privileged responses.

Quick Start

Begin by auditing verify_jwt-enabled Edge Functions, patch to enforce JWT-based roles, redeploy, and validate via edge logs.