How does this skill handle Prisma migrations?

It enforces a two-phase migration strategy: first making changes additive (nullable columns or new tables), and only applying NOT NULL constraints after data has been backfilled.

How is SSRF protection implemented?

It proactively blocks requests to localhost or private IPs, forbids credentials within URLs, and restricts redirects to predefined safe rules.

What security measures are provided for file storage?

The skill establishes specific volume directories, enforces file size and type limits, and requires files to be served via backend logic with Access Control Lists (ACLs).

What encryption standard does this skill use for data?

It mandates the use of AES-256-GCM for field-level encryption within the database, utilizing a BASE64-encoded encryption key.

Secure Data & Storage Management

Name: Secure Data & Storage Management
Author: siriushex

bysiriushex

0•

Security & Testing

Enforces best practices for database migrations, file storage security, SSRF protection, and sensitive data encryption.

The Data Security and Storage skill provides Claude with a rigorous framework for handling sensitive backend operations. It establishes strict rules for Prisma migrations, ensuring zero-downtime schema changes through two-phase updates. The skill also implements crucial security measures including SSRF prevention, AES-256-GCM encryption for database fields, and mandatory idempotency keys for write operations. This is an essential tool for developers building high-integrity applications where data safety, auditability, and infrastructure security are non-negotiable.

Key Features

01Comprehensive SSRF protection blocking private IPs and credential-leaking URLs.

02AES-256-GCM encryption standards for sensitive database-level secrets.

030 GitHub stars

04Mandatory idempotency key logic for reliable mobile and lifestyle API writes.

05Strict file storage rules with volume mapping and ACL-based asset delivery.

06Safe two-phase Prisma migration patterns to prevent data loss or downtime.

Use Cases

01Preventing server-side request forgery in applications fetching external resources.

02Securing health and personal data storage in compliance-heavy environments.

03Managing complex database schema changes across distributed environments.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add siriushex/hba1c data-security-storage

For use in Claude.ai and ChatGPT

Key Features

01Comprehensive SSRF protection blocking private IPs and credential-leaking URLs.

02AES-256-GCM encryption standards for sensitive database-level secrets.

030 GitHub stars

04Mandatory idempotency key logic for reliable mobile and lifestyle API writes.

05Strict file storage rules with volume mapping and ACL-based asset delivery.

06Safe two-phase Prisma migration patterns to prevent data loss or downtime.

Use Cases

01Preventing server-side request forgery in applications fetching external resources.

02Securing health and personal data storage in compliance-heavy environments.

03Managing complex database schema changes across distributed environments.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add siriushex/hba1c data-security-storage

For use in Claude.ai and ChatGPT