# Shinecode Security Skill

## Environment
- Node.js: >= 22.0.0 (Latest OpenSSL 3.0 & security patches)

## Checklist
Ask:
1. What is the trust boundary?
2. What input is untrusted?
3. Who can perform this action?
4. Is authorization server-side?
5. Can this leak data?
6. Can this be abused repeatedly?
7. Does this introduce a dependency?
8. What happens on failure?