AI Blocks › Keep your code secure
Marketplace access auditor
Point it at a marketplace app's code. Get a report of who can see or change what.
Marketplace access auditor is a free AI skill for the job "Keep your code secure". Give the instructions to an AI assistant that supports the required files and tools, then review its output.
Free · No account · CC BY 4.0 licence · Made by sickn33 · Level: expert · Thinking: high
Made by sickn33. See the original on GitHub; we copied it as it is, with its licence.
What it does
A report on who can see or change what in a marketplace app, backed by lines of code as proof. The skill first builds a table of rules for each role. For every action it asks five things: the role, the link to the specific item, the scope, the state of the item and the fields involved. Then it walks the code in order. It lists every entry point, follows how identity and scope are passed, checks each object lookup, checks field limits, and tests state changes like refunds and shipping.
You give it
- The app's code or a repo link
- The list of user roles
- Any rules you intended to enforce (optional)
- Test accounts or setup notes (optional)
You get
- A table of role permissions
- Findings with code evidence
- Severity ranking
- Tests that should be blocked
- A fix list
Use it when
- You built a marketplace with buyers, vendors and admins and want to check the walls between them.
- You are about to launch and need a security review of access rules.
- A bug report says a user saw someone else's order.
- You inherited code and do not know what each role can do.
How to use it
- Add it to your AI once: download it and add the folder to Claude, ChatGPT or Codex as a skill.
- Ask for the job in your own words. Your AI opens the skill when it fits.
- It works best when your AI can read your project files.