mcpField
S
security

security

github.com/thebeardedbearsasSecurity108136 installsUpdated 1d ago
Repository

About security

A security-guidance skill for applying OWASP Top 10 practices across technology stacks. Its quick reference covers input validation, queries, passwords, secrets, and security headers, with detailed documentation available.

Key features

  1. 01Server-side input validation
  2. 02Parameterized queries
  3. 03Secure password hashing
  4. 04Secret management
  5. 05Security header configuration

Use cases

  1. 01Review server-side validation of client input
  2. 02Avoid SQL string concatenation
  3. 03Audit password and secret handling
  4. 04Check common security header settings

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/thebeardedbearsas/claude-craft --skill security

After installing, type/securityin Claude Code to confirm it loaded.

Bundled filesREADME.mdREFERENCE.md

Details

From the project README

Security

This skill provides universal security guidelines and OWASP Top 10 best practices applicable to any technology stack.

See @REFERENCE.md for detailed documentation.

Quick Reference

  • Validation: Always server-side, never trust client input
  • Queries: Parameterized only (no SQL concatenation)
  • Passwords: Hash with bcrypt/Argon2 (never MD5/SHA1)
  • Secrets: Environment variables or vault (never in code)
  • Headers: CSP, X-Frame-Options, HSTS, nosniff

Comments

Markdown supported