Agent skill

security-practices

Security practices including secrets management, input validation, SSRF prevention, and production hardening. Use for security-sensitive code.

View SKILL.md on GitHub Repository
Stars 163
Forks 31

Install this agent skill to your Project

npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/development/security-practices

SKILL.md

security-practices

Quick Start

  1. All secrets in environment variables (never in config files)
  2. Validate inputs at system boundaries
  3. Sanitize error responses (no stack traces in production)
  4. Use HTTPS for all external connections

Key Principles

  • Environment variables for all secrets
  • SSRF prevention (block internal IP ranges)
  • Development vs Production mode separation
  • Rigorous input validation

References

See rules.md for complete conventions.

Didn't find tool you were looking for?

Be as detailed as possible for better results