security-and-hardening
Warn
Audited by Runlayer on Feb 22, 2026
Risk Level: MEDIUM
Scan Summary
Flagged Files (1)
SKILL.mdHIGH
78.3%
Malicious tool definition detected
Tool: SKILL.md [1/2] Description: --- name: security-and-hardening description: Use when handling user input, authentication, data storage, or external integrations.
Tool: SKILL.md [2/2] Description: - [ ] Password reset tokens expire ### Authorization - [ ] Every endpoint checks user permissions - [ ] Users can only access their own resources - [ ] Admin actions require admin role verification ### Input - [ ] All user input validated at the boundary - [ ] SQL queries are parameterized - [ ] HTML output is encoded/escaped ### Data - [ ] No secrets in code or version control - [ ] Sensitive fields excluded from API responses - [ ] PII encrypted at rest (if ap
Audit Metadata