security-stinger
Security audit for SvelteKit, Neon/Drizzle, WorkOS, Stripe, Vercel, Doppler, and GoHighLevel. First gate of the Ship Gate - scans, triages, and remediates vulnerabilities before quality-stinger.
- License
- AGPL-3.0-or-later
- Compatibility
- Claude Code, Cursor, ChatGPT Codex, Claude Cowork.
Pinned to revision 4415691ad3b9, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/security-stinger/SKILL.md
- skills/security-stinger/examples/security-design/source-cases.md
- skills/security-stinger/guides/01-audit-procedure.md
- skills/security-stinger/guides/02-sveltekit-attack-surface.md
- skills/security-stinger/guides/03-authorization-and-tenancy.md
- skills/security-stinger/guides/04-secrets-and-env.md
- skills/security-stinger/guides/05-webhooks-and-third-party-intake.md
- skills/security-stinger/guides/06-dependencies-and-supply-chain.md
- skills/security-stinger/guides/07-headers-and-transport.md
- skills/security-stinger/guides/08-ai-generated-code-patterns.md
- skills/security-stinger/guides/09-remediation-playbooks.md
- skills/security-stinger/guides/10-report-format.md
- skills/security-stinger/guides/11-threat-model-before-features.md
- skills/security-stinger/guides/12-response-and-tenant-boundaries.md
- skills/security-stinger/guides/13-webhook-forgery-replay-and-recovery.md
- skills/security-stinger/guides/14-browser-log-and-context-secrets.md
- skills/security-stinger/guides/15-verify-actual-risk.md
- skills/security-stinger/references/audit-checklist.md
- skills/security-stinger/references/audit-output-format.md
- skills/security-stinger/references/grep-patterns.md
- skills/security-stinger/references/research/distilled-security.md
- skills/security-stinger/references/secure-by-default-snippets.md
- skills/security-stinger/references/severity-rubric.md
- skills/security-stinger/templates/security-design/exposure-scope.md
- skills/security-stinger/templates/security-design/response-boundaries.md
- skills/security-stinger/templates/security-design/risk-verification.md
- skills/security-stinger/templates/security-design/threat-model.md
- skills/security-stinger/templates/security-design/webhook-trust.md
Every link opens the file at its source, pinned to the revision this page describes.