thebeardedbearsas/security
.claude/skills/security/SKILL.md
Security guidelines and OWASP Top 10. Use when reviewing security, implementing authentication or authorization, hardening code, or discussing vulnerabilities.
$ install --global
skillsauthnpx skillsauth add thebeardedbearsas/claude-craft securityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 17, 2026, 10:26 AM32.5s3 files scanned
SKILL.md
- name:
- security
- description:
- Security guidelines and OWASP Top 10. Use when reviewing security, implementing authentication or authorization, hardening code, or discussing vulnerabilities.
- files:
- ["**/auth/**", "**/identity/**", "**/security/**", "**/middleware/**", "*.security.*", "*Auth*.*", "*Security*.*"]
- keywords:
- ["security", "auth", "authentication", "authorization", "OWASP", "injection", "XSS", "CSRF", "JWT", "password", "vulnerability", "encryption", "hashing", "bcrypt", "token", "session", "RBAC", "permissions", "CORS", "HSTS", "CSP", "SQL injection", "SSRF", "rate limit"]
- auto_suggest:
- true
Security
This skill provides universal security guidelines and OWASP Top 10 best practices applicable to any technology stack.
See @REFERENCE.md for detailed documentation.
Quick Reference
- Validation: Always server-side, never trust client input
- Queries: Parameterized only (no SQL concatenation)
- Passwords: Hash with bcrypt/Argon2 (never MD5/SHA1)
- Secrets: Environment variables or vault (never in code)
- Headers: CSP, X-Frame-Options, HSTS, nosniff
Related Skills
thebeardedbearsas/ecosystem-tools
tools
VerifiedTrustedCommunity
Third-party Claude Code token/context/code-review tools. Use when choosing or recommending an external tool to reduce token usage, manage context, or review large codebases.
98SKILL.mdUpdated Jun 4, 2026
thebeardedbearsas/workflow-analysis
development
VerifiedTrustedCommunity
Mandatory analysis workflow for understanding codebase before changes
98SKILL.mdUpdated Apr 17, 2026
thebeardedbearsas/testing
testing
VerifiedTrustedCommunity
TDD/BDD testing principles, test patterns, and coverage strategies
98SKILL.mdUpdated Apr 17, 2026
thebeardedbearsas/solid-principles
development
VerifiedTrustedCommunity
SOLID principles for clean code design and architecture
98SKILL.mdUpdated Apr 17, 2026