security-gate

Run authorization, privacy and prompt-injection test review for PromiseTwin Forge changes. Use before deployment or when touching tenant data, permissions, AI or approvals.

SKILL.md

GitHub

security-gate

Follow docs/04-SECURITY.md. Inspect current diff for tenant data separation, authZ on each resolver, asApp vs asUser, trust in request fields, untrusted prompt data, secrets, egress, overbroad OAuth scopes and auditable mutations. Execute targeted tests. Run official forge-security-review if available. Fail release if critical/high risks remain.

Do not auto-deploy, publish, create public links or change external permissions. Return concise evidence and next action.

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061