security
認可(ACL)・入力出力・機密情報の最優先セキュリティ規約（全セッション適用）
Install / Use
npx skills add Tomo-53/fishing-circle-webInstalls into whichever agent you are using.
Cursor Rules
Cursor IDE rules (v2)
Quality Score
Category
SecuritySupported Platforms
Our assessment of security
security scores 38/100 on our quality scale, 1117th of 1,124 Security skills we index.
Its Cursor Rules is 1.0 KB long, split into 5 sections and no code examples: fairly brief, so expect to fill in details yourself.
It has no GitHub stars yet, so there is no community track record; judge it on its content.
Maintenance, license and trust
- We could not determine when the repository was last updated.
- Our last check on 2026-10-18 found the source still online.
- No license is declared. By default that means all rights are reserved: you can read it, but reusing or redistributing it is not clearly permitted. Ask the author before building on it commercially.
- Its trust signals score 68/100, with 3 cautions from licensing, adoption, age or documentation. These come from repository metadata, not a code audit — read the skill file before letting an agent act on it.
Safety scan
No issues foundOur scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful.
AI review by kimi-k2.7-code on 2026-09-24. Automated pattern scan on 2026-09-24. It catches known dangerous patterns, not every risk — read a skill before letting an agent act on it.
security compared with similar skills
All 4 of these similar skills score higher than security; compare them before choosing.
| Skill | Score | Stars | Updated | Format |
|---|---|---|---|---|
| security (this skill)by Tomo-53 | 38 | 0 | — | Cursor Rules |
| diagram-designby cathrynlavery | 100 | 42.3k | 34d ago | SKILL.md |
| protocol-reverse-engineeringby wshobson | 100 | 39.9k | 33d ago | SKILL.md |
| anndataby K-Dense-AI | 100 | 46.4k | 32d ago | SKILL.md |
| codeqlby github | 100 | 39.3k | 29d ago | SKILL.md |
Frequently asked questions
- How do I install security?
- Run
npx skills add Tomo-53/fishing-circle-web. The install tabs above show the steps for each supported agent. - Which AI agents does security work with?
- It is written for Cursor, as a Cursor Rules file. Other agents that read the same format can often use it too.
- Is security safe to use?
- Our scan of the whole file found no instruction hijacking, hidden characters, credential access, data exfiltration or destructive commands. An AI review of the same text found nothing harmful. It declares no license and scores 68/100 on trust signals. Skills are instructions an agent will follow, so read the file before installing it and do not approve commands you do not understand.
- Is security still maintained?
- We could not determine when the repository was last updated.
Skill content
View source on GitHubdescription: 認可(ACL)・入力出力・機密情報の最優先セキュリティ規約（全セッション適用） alwaysApply: true
セキュリティ規約（全セッション適用）
このプロジェクトは会員制で釣果情報を保護する。セキュリティは最優先事項。
認可（ACL）
- すべての保護対象操作はサーバ側で認可する：
check.group.permissionミドルウェア / Policy / FormRequest のauthorize()。 - 権限チェックは必ず
user_idとgroup_idの両方でスコープする。片方だけのチェックはグループ横断の権限漏れになる。 is_approved = false（承認待ち）のユーザーはグループコンテンツにアクセスさせない。- Blade の
@canなどの表示制御はUXのためであり、認可の本体ではない。
入力・出力
- 入力は FormRequest で必ずバリデーション。
$request->validated()のみをモデルに渡す。 - Mass Assignment は
$fillableで制御。$guarded = []禁止。 - 出力は Blade の
{{ }}で自動エスケープ。{!! !!}は原則禁止（XSS）。 - DB アクセスは Eloquent / クエリビルダ / バインドパラメータ。生 SQL の文字列結合禁止（SQLi）。
機密情報
.env/src/.env/APP_KEY/MAIL_PASSWORD/ DB認証情報を絶対にコミット・出力しない。- 管理対象は
.env.example/src/.env.exampleのみ。実値はプレースホルダにする。 - 新しい機密値が必要なときは
.env.exampleにキーだけ追加し、SETUP.md に説明を書く。
その他
- CSRF：フォームに
@csrf。状態変更は POST/PATCH/DELETE で行う。 - パスワード等は Laravel の
Hash/ 標準認証（Breeze）に従う。独自実装しない。 - 依存追加は最小限にし、目的を明示する。
- 詳細なセキュリティ方針は SECURITY.md を参照。
Related Skills
diagram-design
42.3kCreate branded architecture, IT current-state, flowchart, sequence, state machine, ER/data model, timeline, swimlane, quadrant, radar/spider, polar chart (polar/radial lollipop), loop/flywheel, nested, tree, org chart, layer stack, Venn, pyramid/funnel, treemap, heatmap, bar, waterfall, line, Gantt…
protocol-reverse-engineering
39.9kMaster network protocol reverse engineering including packet analysis, protocol dissection, and custom protocol documentation
anndata
46.4kHandles annotated matrices in single-cell analysis, .h5ad and Zarr files, and integration with the scverse ecosystem. This is the data format skill—for analysis workflows use scanpy; for probabilistic models use scvi-tools; for population-scale queries use cellxgene-census.
codeql
39.3kComprehensive guide for setting up and configuring CodeQL code scanning via GitHub Actions workflows and the CodeQL CLI. This skill should be used when users need help with code scanning configuration, CodeQL workflow files, CodeQL CLI commands, SARIF output, security analysis setup, or troubleshoot…
Trust signals
From repository metadata: license, adoption, age and documentation. Not a code audit — see the Safety scan above for what the skill file itself contains.