[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71TERCPVFJHDH5PDGNE4ECV":3,"skill-same:01M71TERCPVFJHDH5PDGNE4ECV":68},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":39,"linkOnly":40,"markdownContent":41,"markdownBody":42,"frontMatter":43,"refName":46,"commitSha":47,"skillDirectory":48,"forksCount":49,"repositoryHtmlUrl":50,"repositoryHomepageUrl":6,"ownerHtmlUrl":51,"ownerBlogUrl":52,"ownerDescription":53,"updatedAt":54,"install":55,"resources":67},"01M71TERCPVFJHDH5PDGNE4ECV","ai-app-security-review",null,"Use when model providers, agents, RAG, tools, AI SDKs, prompt injection, tool-call safety, retrieval grounding, provider error leakage, or telemetry redaction matter.","priyanshuchawda\u002Fcodeaudit","priyanshuchawda","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F86182776?v=4","01M71TEPGTQ7JF9HFY0A148WZT","Priyanshu Chawda","01M71TEPHJEC1K5JRETDJJ42P0",1,"MIT","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fai-app-security-review\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38],"ai app security review","security","security review","app","review","app security","provider","when","sdks","true","grounding","error","call","use","prompt","model","tool","rag","telemetry","prompt injection","2026-11-10 13:02:02",false,"---\nname: ai-app-security-review\ndescription: Use when model providers, agents, RAG, tools, AI SDKs, prompt injection, tool-call safety, retrieval grounding, provider error leakage, or telemetry redaction matter.\nmetadata:\n  internal: true\n---\n\n# AI App Security Review\n\n## Required Checks\n\n- Prompt injection boundaries between user, retrieved, system, and tool content.\n- Tool-call allowlists, parameter validation, and destructive-action approval.\n- Retrieval\u002Fdocument grounding and citation expectations.\n- Model provider error handling without raw provider leakage.\n- User input boundaries before prompts, tools, database writes, and outbound requests.\n- Logging and telemetry redaction for prompts, documents, tokens, cookies, and keys.\n\n## Output\n\nGroup findings by trust boundary. Prefer specific mitigations such as schema validation, allowlisted tools, redacted logs, and explicit human approval gates.\n","# AI App Security Review\n\n## Required Checks\n\n- Prompt injection boundaries between user, retrieved, system, and tool content.\n- Tool-call allowlists, parameter validation, and destructive-action approval.\n- Retrieval\u002Fdocument grounding and citation expectations.\n- Model provider error handling without raw provider leakage.\n- User input boundaries before prompts, tools, database writes, and outbound requests.\n- Logging and telemetry redaction for prompts, documents, tokens, cookies, and keys.\n\n## Output\n\nGroup findings by trust boundary. Prefer specific mitigations such as schema validation, allowlisted tools, redacted logs, and explicit human approval gates.\n",{"name":5,"metadata":44,"description":7},{"internal":45},true,"main","f7c3f3ddb5b3c5d42bed4fb0b9d28e766380b959","skills\u002Fai-app-security-review",0,"https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda","priyanshuworks.tech","AI Agent Engineer | Building DevTools & Automation","2026-05-04 12:27:13",{"source":8,"skillName":5,"commands":56,"prompt":66,"zipAvailable":45},[57,60,63],{"tool":58,"command":59},"npx","npx skills add priyanshuchawda\u002Fcodeaudit --skill ai-app-security-review",{"tool":61,"command":62},"bunx","bunx skills add priyanshuchawda\u002Fcodeaudit --skill ai-app-security-review",{"tool":64,"command":65},"pnpm","pnpm dlx skills add priyanshuchawda\u002Fcodeaudit --skill ai-app-security-review","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fai-app-security-review\u002FSKILL.md",[],[69,89,99,125,143,169],{"skillNo":70,"name":71,"nameZh":6,"description":72,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":73,"categories":74,"keywords":75,"publishedAt":39},"01M71TG5F1YSS9YP7VF5SNHM58","dangerous-helper","Unsafe fixture skill for supply-chain audit tests.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Frisky-skills\u002Fskills\u002Fdangerous-helper\u002FSKILL.md",[],[76,77,78,79,80,81,82,83,84,85,86,87,88],"dangerous","helper","dangerous helper","supply-chain","audit","audit tests","unsafe","tests","fixture skill","for","chain","fixture","supply",{"skillNo":90,"name":91,"nameZh":6,"description":92,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":93,"categories":94,"keywords":95,"publishedAt":39},"01M71TG2HYMTMBAWX4H0C3JK6D","benign-helper","Safe fixture skill for supply-chain audit tests.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Ftests\u002Ffixtures\u002Frisky-skills\u002Fskills\u002Fbenign-helper\u002FSKILL.md",[],[96,97,77,79,98,80,81,83,84,85,86,87,88],"benign helper","benign","safe",{"skillNo":100,"name":101,"nameZh":6,"description":102,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":103,"categories":104,"keywords":110,"publishedAt":39},"01M71TFVD6R75MSF6P6FWCJS24","skill-supply-chain-auditor","Use when reviewing installed skills, adding third-party skills, hardening agent workflows, checking skill correctness, removing duplicate skills, or investigating supply-chain, prompt-injection, secret-leakage, dependency-install, webhook, destructive-shell, manifest-quality, or resource-discovery risks.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fskill-supply-chain-auditor\u002FSKILL.md",[105],{"categoryNo":106,"categoryName":107,"taxonomyType":108,"taxonomyTypeDesc":109},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[88,86,111,112,113,114,115,116,117,118,119,120,26,121,33,32,122,123,124,28],"skill supply chain auditor","supply chain","auditor","secret","shell","dependency","duplicate","correctness","prompt-injection","manifest","workflows","agent workflows","discovery","webhook",{"skillNo":126,"name":127,"nameZh":6,"description":128,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":129,"categories":130,"keywords":134,"publishedAt":39},"01M71TFQWGR5ZPYJ7G83S5BHFF","refactor-with-tests","Use when splitting files, improving architecture, reducing duplication, changing internals, or preserving behavior through focused tests during refactors.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Frefactor-with-tests\u002FSKILL.md",[131],{"categoryNo":132,"categoryName":133,"taxonomyType":108,"taxonomyTypeDesc":109},"01JBSEEDCAT000000000000007","代码审查",[135,136,137,83,28,138,139,140,141,26,32,142],"refactor","with","refactor with tests","reducing","duplication","behavior","architecture","files",{"skillNo":144,"name":145,"nameZh":6,"description":146,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":147,"categories":148,"keywords":153,"publishedAt":39},"01M71TFMPQ57A7PXN4DDC0X2J4","python-mcp-server-quality","Use when creating, auditing, or improving Python MCP servers, FastMCP tools, resources, prompts, stdio transports, streamable HTTP transports, MCP Inspector setup, or Python tool schemas.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fpython-mcp-server-quality\u002FSKILL.md",[149,152],{"categoryNo":150,"categoryName":151,"taxonomyType":108,"taxonomyTypeDesc":109},"01JBSEEDCAT000000000000010","后端与接口",{"categoryNo":106,"categoryName":107,"taxonomyType":108,"taxonomyTypeDesc":109},[154,155,156,157,158,159,28,160,35,161,32,162,163,164,165,166,167,26,168],"quality","server","python mcp server quality","mcp server","MCP","python","schemas","resources","fastmcp","Tools","setup","prompts","mcp servers","servers","http",{"skillNo":170,"name":171,"nameZh":6,"description":172,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":173,"categories":174,"keywords":181,"publishedAt":39},"01M71TFH72ZKT4959VEKNV1N12","python-backend-quality","Use when reviewing, creating, or improving Python services, CLIs, libraries, FastAPI, Django, Flask, pytest, uv, pyproject, typing, Pydantic, SQLAlchemy, async code, packaging, or deployment.","https:\u002F\u002Fgithub.com\u002Fpriyanshuchawda\u002Fcodeaudit\u002Fblob\u002Fmain\u002Fskills\u002Fpython-backend-quality\u002FSKILL.md",[175,176],{"categoryNo":150,"categoryName":151,"taxonomyType":108,"taxonomyTypeDesc":109},{"categoryNo":177,"categoryName":178,"taxonomyType":179,"taxonomyTypeDesc":180},"01JBSEEDCAT000000000000030","开发工程师","PROFESSION","适用职业",[182,159,154,183,184,26,185,186,187,188,189,32,190,191,28,192,193,194,195,196],"python backend","backend","python backend quality","python services","Pydantic","services","libraries","code","fastapi","uv","async","packaging","deployment","django","typing"]