aegis-baas-platform SKILL.md skillA
aegis-baas-platform from as-foss/aegis-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add as-foss/aegis-skills/aegis-baas-platform@git:20260826.9702747Pins git:20260826.9702747 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- as-foss/aegis-skills
- Path
skills/code/baas-platform/SKILL.md- Versions recorded
- 3
- Latest version
- git:20260826.9702747, committed Aug 26, 2026
- First version recorded
- Aug 25, 2026
- Size
- 45,514 bytes
- Repository stars
- 16
- License
- Apache-2.0
Audits Backend-as-a-Service and managed-platform configuration - Supabase RLS, Firebase security rules, connection-string databases, serverless host exposure, payment-webhook integrity, and managed CMS posture - for broken-access-control footguns that expose or corrupt production data.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
## Scope & Objectives This module audits the managed platforms where modern products actually run. It is configuration-first: the platform vendor secures its infrastructure; the application owner secures everything configured on top of it, and on every platform below there is a default whose failure mode equals full-database compromise. **Shared-responsibility baseline.** The vendor patches Postgres, scales Firestore, signs TLS, and operates the control plane. You own, without exception: - Row Level Security (RLS) enablement and policy quality on every table. - Security rules files (Firestore / Realtime Database / Storage). - Network access lists and credential hygiene on connection-string databases. - Which environment variables reach the browser and who can open preview deployments. - Whether fulfillment logic verifies provider signatures before granting anything. - CMS core/plugin/theme lifecycle and hardening constants. …
Read the whole file at its exact version.
How to install
mdr add as-foss/aegis-skills/aegis-baas-platform@sha256:87cc11c467cabaebThe line at the top of this page pins the label git:20260826.9702747, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_3rby75ijqsnjjadm)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 3 versions of this file, between Aug 25, 2026 and Aug 26, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260826.9702747 latest | 2026-08-26 | 9702747 | 45,514 B | A | view · diff |
| git:20260825.85624bc | 2026-08-25 | 85624bc | 45,515 B | A | view · diff |
| git:20260825.244c198 | 2026-08-25 | 244c198 | 44,474 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (45514 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
as-foss/aegis-skills · 16 stars · license Apache-2.0 · pushed 2026-08-26 · branch master
API
GET https://markdownregistry.com/api/v1/artifacts/art_3rby75ijqsnjjadm GET https://markdownregistry.com/api/v1/resolve?ref=as-foss/aegis-skills/aegis-baas-platform GET https://markdownregistry.com/api/v1/blob/87cc11c467cabaeb272e1b3f87309c5bc89fc8436275cd03477ca4bc00867f46
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.