coldtatooine

coldtatooine/vuln-skill-pack

Skill Claude CodeCodex

Use when reviewing, building, or shipping Stripe payment or billing flows. Footguns: unverified webhooks, client-trusted amounts, secret key exposure, missing idempotency, wrong fulfillment event, unfiltered event types.

coldtatooine/vuln-skill-pack

Skill Claude CodeCodex

Use when reviewing, building, or shipping a Supabase-backed app. Footguns: RLS off or too permissive, servicerole in the client, weak policies, storage/realtime exposure, trusting client-set columns.