Developer Sandbox Abuse Prevention Review

Use this skill to convert developer sandbox, free trial, API key, plugin testing, webhook, synthetic data, quota abuse, token mining, spam, fake app, marketplace certification, and sandbox trust questions into a concrete artifact with owners, gates, metrics, and recovery paths.

Workflow

1. Identify sandbox entry points, developer identity, API keys, tokens, data boundaries, risky capabilities, quota model, fraud signals, review paths, support burden, and graduation criteria.
2. Read references/developer-sandbox-abuse-prevention-patterns.md.
3. Classify the situation as open signup sandbox, invite-only sandbox, marketplace integration sandbox, API trial, certification environment, high-risk capability request, suspected abuse spike, or graduation-to-production review.
4. Define environment isolation, synthetic data policy, quota ladder, risky capability gates, abuse detection, graduated trust, manual review, appeal path, developer messaging, and production promotion gate.
5. Produce sandbox abuse prevention review, state machine, decision table, event schema, control checklist, queue policy, and developer-safe mitigation plan.

When not to use

• Do not use for generic advice the base model already handles without this skill's specific artifact contract.

Guardrails