Aif Security Checklist
Security audit checklist based on OWASP Top 10 and best practices.
Install
npx skills add lee-to/ai-factory --skill aif-security-checklist -g -a claude-code -y- Repository
- lee-to/ai-factory1.2k
- Category
- Security
- Updated
- 3d ago
- License
- See repository
- Context cost
- Mediumabout 3,000 tokens
- Runs scripts
- Yes, review before use
What it does
Security audit checklist based on OWASP Top 10 and best practices. Covers authentication, injection, XSS, CSRF, secrets management, and more. Use when reviewing security, before deploy, asking "is this secure", "security check", "vulnerability".
Security Checklist
Shared project skill-context
Before mode routing or work, read existing files relative to the current project root in this order (reuse them if already loaded):
.ai-factory/skill-context/global-skill-context.md, all bundled skills..ai-factory/skill-context/aif-security-checklist/SKILL.md, this skill.
Missing files are skipped; an existing unreadable file stops dependent work with its path.
Precedence: individual > build (when applicable) > global > skill defaults; retain non-conflicting instructions and check all outputs against the effective rules.
These layers customize workflow; they do not replace the project's rules/architecture hierarchy or relax explicit requirements, ownership, scope, safety/privacy, validation, or approval boundaries. Report conflicts with those boundaries instead of overriding them.
global is a project-local layer, not home-directory configuration. Custom/extension skills do not automatically use it.
Comprehensive security checklist based on OWASP Top 10 (2021) and industry best practices.
Quick Reference
/aif-security-checklist, Full audit checklist/aif-security-checklist auth, Authentication & sessions/aif-security-checklist injection, SQL/NoSQL/Command injection/aif-security-checklist xss, Cross-site scripting/aif-security-checklist csrf, Cross-site request forgery/aif-security-checklist secrets, Secrets & credentials/aif-security-checklist api, API security/aif-security-checklist infra, Infrastructure security/aif-security-checklist prompt-injection, LLM prompt injection/aif-security-checklist race-condition, Race conditions & TOCTOU/aif-security-checklist ignore <item>, Ignore a specific check item
