Skip to main content

project-guidelines-example

Provides a structured template for project-specific skills, detailing architecture, file structure, and code patterns for development.

Install this skill

or
83/100

Security score

The project-guidelines-example skill was audited on Feb 27, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 131

Template literal with variable interpolation in command context

SourceSKILL.md
131const response = await fetch(`/api${endpoint}`, {
medium line 140

Template literal with variable interpolation in command context

SourceSKILL.md
140return { success: false, error: `HTTP ${response.status}` }
low line 316

Access to .env file

SourceSKILL.md
316# Frontend (.env.local)
low line 321

Access to .env file

SourceSKILL.md
321# Backend (.env)
low line 10

External URL reference

SourceSKILL.md
10Based on a real production application: [Zenith](https://zenith.chat) - AI-powered customer discovery platform.
low line 246

External URL reference

SourceSKILL.md
246async with AsyncClient(app=app, base_url="http://test") as ac:
low line 317

External URL reference

SourceSKILL.md
317NEXT_PUBLIC_API_URL=https://api.example.com
low line 318

External URL reference

SourceSKILL.md
318NEXT_PUBLIC_SUPABASE_URL=https://xxx.supabase.co
low line 324

External URL reference

SourceSKILL.md
324SUPABASE_URL=https://xxx.supabase.co
Scanned on Feb 27, 2026
View Security Dashboard
Installation guide →