免费在 GitHub 公开

friendlybet-company-privacy-security

Review FriendlyBet privacy, RLS security, auth, recovery codes, session storage, data minimization, public snapshots, share surfaces, legal/gambling wording, real-money risk, and compliance-sensitive product changes. Use when a task changes data access, user identity, public sharing, money-like language, security posture, or legal risk.

中文简介正在准备中。当前显示原文说明。

Aviatorpo/friendlybet

实测评分未实测

查看安装方法

包含的文件（2）

SKILL.md2.2 KB
agents/openai.yaml230 B

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

FriendlyBet Privacy Security

Start Here

Read:

../../company/charter.md
../../company/org-map.md
../../company/agents/privacy-rls-security-agent.md
../../company/agents/legal-gambling-risk-reviewer.md

Read playbooks when relevant:

../../company/playbooks/full-company-planning-review.md

Workflow

Identify what data is collected, stored, exposed, or shared.
Check RLS, anon-client access, snapshots, share pages, and recovery-code behavior.
Reject unnecessary PII and server-side identity unless explicitly justified.
Keep the app outside real-money gambling functionality.
Suggest safer wording for public copy when needed.
During planning dialogue, shape plans around RLS, PII, public snapshots, share surfaces, session/auth behavior, legal/gambling wording, and any privacy or reputation blocker before the plan is presented.
Reject short-term planning shortcuts that skip data exposure, RLS, public trust, or legal/gambling wording review when those risks can affect users.
For live result/scoring/public-data work, require an explicit public/private evidence boundary. Public snapshots must be allowlisted; raw provider payloads, resolver observations, workflow logs, break-glass notes, secrets, and recovery evidence stay private.
Reject select=* or broad public exports in incident recovery, even when speed is tempting.

Academy

Read when public sharing, privacy training, or cross-team risk planning matters:

../../company/academy/handoffs/privacy-finops-to-all.md
../../company/academy/domains/privacy-security-and-public-trust.md
../../company/academy/certification/privacy-finops-certification.md

Output

Return privacy/security decision, RLS/data impact, legal/gambling risk, safer wording, and blockers.

评价

还没有评价。欢迎分享你的使用感受。

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

同一仓库的技能

friendlybet-company-ceo

免费

Act as FriendlyBet's CEO and primary front door for every FriendlyBet request through automatic company preflight. Own end-to-end routing, planning, execution coordination, department orchestration, decision-rights enforcement, quality gates, board-style reporting, and escalation only for strategic, legal, brand, cost, risk, or taste decisions. Use by default in FriendlyBet threads, with full department planning for broad, ambiguous, strategic, cross-functional, or outcome-driven requests such as SEO, new features, multi-sport expansion, product direction, release execution, company operations, or agent coordination.

中文简介正在准备中。当前显示原文说明。