compliance-checker

SKILL.md

// src/routes/patients.js:45 app.get('/api/patients/:id', authenticateUser, async (req, res) => { const patient = await Patient.findById(req.params.id); res.json(patient); // ❌ No authorization check });

app.get('/api/patients/:id', authenticateUser, async (req, res) => { const patient = await Patient.findById(req.params.id);

// Check authorization if (!canAccessPatient(req.user, patient)) { return res.status(403).json({ error: 'Forbidden' }); }

Check code against security compliance standards and best practices. Source: curiouslearner/devkit.

View raw