Secure

This is the security audit checklist you run before launch. It catches the boring stuff AI tools mess up: API keys hardcoded in files, missing auth checks on protected routes, no rate limiting, plain text passwords. The skill is opinionated about what you don't need yet (OAuth, pentests, WAFs) and pushes you toward auth services instead of rolling your own. Most useful as a pre-flight checklist when you're moving from "works on my machine" to "other people can use this." The prompts are specific enough to copy-paste into Claude, Cursor, or Lovable. Covers OWASP basics without the security theater.

Install to Claude Code

npx -y skills add whawkinsiv/claude-code-superpowers --skill secure --agent claude-code