# Rule Security

> Security rules this project always applies: secret handling, input validation, parameterized queries, and Supabase RLS. Load before writing code that touches credentials, user input, queries, or auth.

- Skill: `djnsty23/rule-security` (Agent Skill)
- Install (CLI): `npx skillmds@latest add djnsty23/rule-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/djnsty23/rule-security/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: djnsty23 (https://skillmd.com/u/djnsty23)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/djnsty23/rule-security

---


- Never commit .env, API keys, credentials
- Validate user input with Zod
- Use parameterized queries
- Supabase: RLS policies required, secrets in Edge Functions only
- Test edge functions after deploy (curl with real params, verify response)
- Verify bulk changes eliminated the old pattern completely (grep for remnants)