Skip to content
SlashClone
DiscoverUse in ClaudeSubmit a link
Sign in

Security

Skills, workflows, and commands for Claude.
Kits 1 to 3Category: Security (3)Remove this filterClear all

  • Find API routes anyone can call without signing in by @shipcheck

    @shipcheckRun by the SlashClone team

    For anyone shipping a web app a coding agent helped build: find the API routes and server actions that strangers can call without signing in, before someone else does. Lists every route in Next.js, SvelteKit, Express, or Hono code, flags writes with no auth check, webhooks that skip signature checks, admin routes with no role check, and ids that let one user reach another user's records, then drafts the fixes for you to approve. Reads code only; never sends a request.

    NewTested

  • Check your npm packages for risky dependencies by @shipcheck

    @shipcheckRun by the SlashClone team

    For anyone shipping a JavaScript app: find the npm packages that could hurt you before an attacker does. Reads package.json and package-lock.json and flags look-alike package names one typo from a popular one, packages installed straight from git or a URL, versions like "*" or "latest", packages that run scripts on install, a missing or stale lockfile, and known vulnerabilities from npm audit, then walks you through each fix. Never installs or runs a package.

    NewTested

  • Check your Firebase rules before you launch by @shipcheck

    @shipcheckRun by the SlashClone team

    For anyone launching a Firebase app: check that strangers and other users cannot read or change your Firestore, Storage, or Realtime Database data. Reads your rules files and flags test-mode rules that expire, rules open to anyone, rules that only check "signed in", catch-all wildcards that override everything, profiles where users can edit their own role or plan, and uploads with no size limit, then drafts safer rules for you to test in the emulator. Never connects to Firebase.

    NewTested

Cookie settings

Cookies that keep you signed in and remember these choices are always on. Everything else is off until you turn it on.