Skip to main content

dev-engineering-super-skill

Combines full-stack development skills with advanced engineering capabilities for architecture, testing, and deployment.

Install this skill

or
48/100

Security score

The dev-engineering-super-skill skill was audited on Mar 14, 2026 and we found 20 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 1650

Template literal with variable interpolation in command context

SourceSKILL.md
1650```yaml
medium line 140

System command execution

SourceSKILL.md
140System(ecommerce, "E-Commerce Platform", "Handles orders, payments, inventory")
medium line 45

Webhook reference - potential data exfiltration

SourceSKILL.md
45| Server-side logic, CGI, webhooks | `webserver` skill | Backend engineer | **Full: CGI + FastAPI + Express** |
medium line 915

Webhook reference - potential data exfiltration

SourceSKILL.md
915### Server-Side Logic: CGI, Webhooks, SQLite
medium line 917

Webhook reference - potential data exfiltration

SourceSKILL.md
917For lightweight server-side use cases (webhooks, form backends, data persistence):
low line 920

Webhook reference - potential data exfiltration

SourceSKILL.md
920# Simple webhook receiver (CGI)
low line 840

Access to .env file

SourceSKILL.md
840db: { url: process.env.DATABASE_URL },
low line 854

Access to .env file

SourceSKILL.md
854secret: process.env.JWT_SECRET, // Must be from env, never hardcoded
low line 964

Access to .env file

SourceSKILL.md
964origin: process.env.ALLOWED_ORIGINS?.split(',') || [],
medium line 1007

Access to .env file

SourceSKILL.md
1007- Environment file templates (`.env.example`)
low line 1089

Access to .env file

SourceSKILL.md
1089cp .env.example .env.local
low line 1923

Access to .env file

SourceSKILL.md
1923level: process.env.LOG_LEVEL || 'info',
medium line 2011

Access to .env file

SourceSKILL.md
2011- [ ] Use `.env.example` with placeholder values
medium line 2580

Access to .env file

SourceSKILL.md
2580cp .env.example .env
low line 665

External URL reference

SourceSKILL.md
665url: 'https://example.com',
low line 889

External URL reference

SourceSKILL.md
889python scripts/api_load_tester.py https://api.example.com/users \
low line 893

External URL reference

SourceSKILL.md
893python scripts/api_load_tester.py https://api.example.com/orders \
low line 901

External URL reference

SourceSKILL.md
901https://api.example.com/v1/users \
low line 902

External URL reference

SourceSKILL.md
902https://api.example.com/v2/users \
low line 1808

External URL reference

SourceSKILL.md
1808./scripts/smoke-test.sh https://green.example.com
Scanned on Mar 14, 2026
View Security Dashboard