distributed-systems-patterns
Generates architectural artifacts for distributed systems, aiding in decision-making and coordination across multiple services.
Install this skill
or
55/100
Security score
The distributed-systems-patterns skill was audited on Jun 4, 2026 and we found 7 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
high line 404
Direct command execution function call
SourceSKILL.md
| 404 | _, err = tx.Exec(ctx, ` |
medium line 74
Webhook reference - potential data exfiltration
SourceSKILL.md
| 74 | - `reference/security-compliance.md` - PII, secrets, tenant isolation, webhooks, IAM/ACLs, retention, and audit. |
medium line 139
Webhook reference - potential data exfiltration
SourceSKILL.md
| 139 | c. Slug consistency: derive a single feature slug from the user's prompt (e.g. `order-fulfillment`, `payment-authorization`, `webhook-ingestion`) and use it consistently across all files for that feat |
medium line 287
Webhook reference - potential data exfiltration
SourceSKILL.md
| 287 | **Concept signals:** queue, topic, channel, exchange, broker, event, command, message, async, pub/sub, fan-out, saga, process manager, workflow, orchestration, choreography, outbox, inbox, CDC, idempo |
medium line 289
Webhook reference - potential data exfiltration
SourceSKILL.md
| 289 | **Code-shape signals:** message producer or consumer, webhook handler, Lambda event source, `@KafkaListener`, `pubsub.Subscribe`, `app.event(...)`, `@MessagePattern`, AsyncAPI file, `events/*.proto`, |
medium line 351
Webhook reference - potential data exfiltration
SourceSKILL.md
| 351 | 6. **Schema evolution?** Avro, Protobuf, or JSON Schema with Registry/CI compatibility gate. For HTTP/webhooks, also publish AsyncAPI/OpenAPI as appropriate. |
medium line 374
Webhook reference - potential data exfiltration
SourceSKILL.md
| 374 | - **Security:** No secrets in messages; tag PII in schema; encrypt in transit and at rest; least-privilege producer/consumer credentials; signed webhooks crossing trust boundaries. |
Scanned on Jun 4, 2026
View Security DashboardGitHub Stars 3
Rate this skill
Categorydevelopment
UpdatedJune 15, 2026
openclawbackendapiml-ai-engineerbackend-developerproduct-managertechnical-pmdata-engineerawsdevelopmentproduct
adibhanna/distributed-systems-patterns