Skip to main content

distributed-systems-patterns

Generates architectural artifacts for distributed systems, aiding in decision-making and coordination across multiple services.

Install this skill

or
55/100

Security score

The distributed-systems-patterns skill was audited on Jun 4, 2026 and we found 7 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 404

Direct command execution function call

SourceSKILL.md
404_, err = tx.Exec(ctx, `
medium line 74

Webhook reference - potential data exfiltration

SourceSKILL.md
74- `reference/security-compliance.md` - PII, secrets, tenant isolation, webhooks, IAM/ACLs, retention, and audit.
medium line 139

Webhook reference - potential data exfiltration

SourceSKILL.md
139c. Slug consistency: derive a single feature slug from the user's prompt (e.g. `order-fulfillment`, `payment-authorization`, `webhook-ingestion`) and use it consistently across all files for that feat
medium line 287

Webhook reference - potential data exfiltration

SourceSKILL.md
287**Concept signals:** queue, topic, channel, exchange, broker, event, command, message, async, pub/sub, fan-out, saga, process manager, workflow, orchestration, choreography, outbox, inbox, CDC, idempo
medium line 289

Webhook reference - potential data exfiltration

SourceSKILL.md
289**Code-shape signals:** message producer or consumer, webhook handler, Lambda event source, `@KafkaListener`, `pubsub.Subscribe`, `app.event(...)`, `@MessagePattern`, AsyncAPI file, `events/*.proto`,
medium line 351

Webhook reference - potential data exfiltration

SourceSKILL.md
3516. **Schema evolution?** Avro, Protobuf, or JSON Schema with Registry/CI compatibility gate. For HTTP/webhooks, also publish AsyncAPI/OpenAPI as appropriate.
medium line 374

Webhook reference - potential data exfiltration

SourceSKILL.md
374- **Security:** No secrets in messages; tag PII in schema; encrypt in transit and at rest; least-privilege producer/consumer credentials; signed webhooks crossing trust boundaries.
Scanned on Jun 4, 2026
View Security Dashboard
Installation guide →