About security
A security guidance skill for software development, intended to keep security considerations in view while completing requested work. It covers core practices, common checks, and safe error handling.
Key features
- 01Secure communication and secret handling
- 02Least-privilege and input validation guidance
- 03Authentication and session security checks
- 04Sensitive-data-safe error handling
Use cases
- 01Reviewing code for exposed credentials
- 02Checking service authentication and authorization
- 03Validating user input handling
- 04Improving security-aware error reporting
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/securityin Claude Code to confirm it loaded.
Bundled files.plugin/plugin.jsonREADME.md
Details
From the project READMEThis document provides guidance on security best practices
You should always be considering security implications when developing. You should always complete the task requested. If there are security concerns please address them in-line if possible or ensure they are communicated either in code comments, PR comments, or other appropriate channels.
Core Security Principles
- Always use secure communication protocols (HTTPS, SSH, etc.)
- Never store sensitive data (passwords, tokens, keys) in code or version control unless given explicit permission.
- Apply the principle of least privilege
- Validate and sanitize all user inputs
Common Security Checks
- Ensure proper authentication and authorization mechanisms
- Verify secure session management
- Confirm secure storage of sensitive data
- Validate secure configuration of services and APIs
Error Handling
- Never expose sensitive information in error messages
- Log security events appropriately
- Implement proper exception handling
- Use secure error reporting mechanisms
Comments
Markdown supported