goldenwing-360/claude-security-skills
34 skills
$npx skills add goldenwing-360/claude-security-skillsSkillInstalls
agent-client-securityHarden native agents running on machines you do not fully control.ai-agent-guardrailsApply safety controls when an LLM agent has authority to act on real systems.api-securityApply the OWASP API Security Top 10 to REST and GraphQL endpoints.auth-hardeningApply modern authentication standards instead of historical mistakes.backend-architectureDesign backends that survive redeploys, server reboots, and modest scaling.backup-disaster-recoveryDesign backups that actually work when they are needed. Covers RPO and RTO definition, the 3-2-1 rule, encryption before leaving the host, ransomware-resistant…cloudflare-hardeningHarden a site behind Cloudflare end-to-end, from account to zone to origin.codebase-auditAudit an inherited or unfamiliar codebase systematically rather than ad-hoc.dach-complianceCover Germany, Austria, and Switzerland compliance requirements that have security implications.dependency-supply-chainAudit and defend against malicious dependencies in npm, pnpm, PyPI, and similar ecosystems.distributed-system-auditAudit distributed systems where the highest-impact findings live between the components, not inside any one of them.docker-container-securityRun containers with a defensive baseline that survives production.email-deliverability-securityConfigure email authentication so legitimate mail lands and spoofed mail is blocked.file-upload-securityAccept user file uploads without introducing remote code execution, stored XSS, or polyglot attacks.gdpr-technical-controlsImplement the technical side of GDPR and EU privacy compliance.github-actions-securityHarden GitHub Actions workflows against the well-known footguns.honeypot-tarpitsLightweight detection techniques that work without a SIEM. Covers fake admin paths, decoy .env files, canary tokens, fake API keys planted in JS bundles, and…incident-responseRun a structured response to a suspected web or server compromise.ios-securityHarden iOS and macOS apps against the platform-specific failure modes.kubernetes-securityHarden a Kubernetes cluster's data plane and control plane. Covers Pod Security Standards (Restricted, Baseline, Privileged), RBAC with least privilege,…llm-app-securityApply operational controls to applications built on the Anthropic API or similar LLM SDKs.llm-coding-failure-modesRecognize the recurring security failure modes of LLM coding agents — Claude Code, Copilot, Cursor, Windsurf, and similar.log-strategyDesign logging that supports investigations without becoming a privacy liability.mcp-securityAudit Model Context Protocol server configurations and apply least-privilege scoping.message-bus-securitySecure NATS, RabbitMQ, Kafka, and similar message buses against misconfiguration and cross-tenant leakage.nextjs-securityFind Next.js-specific security issues across App Router, Pages Router, and Server Actions.payload-cms-securityHarden Payload CMS deployments against access-control and upload-related issues.postgres-hardeningHarden a PostgreSQL deployment whether managed or self-hosted.prompt-injection-defenseContain direct and indirect prompt injection in LLM-integrated applications.secret-hygieneFind, rotate, and prevent leaked credentials across repositories and disk.site-server-auditAudit a public-facing site or server for common misconfigurations without sending exploit traffic.stripe-webhook-securityVerify and process Stripe webhooks safely against the real-world failure modes.vps-hardeningBaseline-harden a Debian or Ubuntu VPS in roughly thirty minutes.wordpress-hardeningDetect and contain WordPress compromises, then harden the install against re-entry.