Recognize the recurring security failure modes of LLM coding agents — Claude Code, Copilot, Cursor, Windsurf, and similar. Covers bulk operations without per-item review, safety-guard bypass as friction removal, acting on indirect injection, secrets in logs and commits, slopsquatting, outdated training patterns, sycophancy on insecure proposals, and silent error swallowing. Invoke when reviewing LLM-written code, designing a coding agent's guardrails, or onboarding a team to LLM-assisted workflows.
$npx -y skills add goldenwing-360/claude-security-skills --skill llm-coding-failure-modesInstalls into the current project.
Run `npx skills use "https://github.com/goldenwing-360/claude-security-skills" --skill "goldenwing-360/claude-security-skills/llm-coding-failure-modes"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/goldenwing-360/claude-security-skills" that are relevant to the current task. Run `npx skills add "https://github.com/goldenwing-360/claude-security-skills"` and select the relevant skills, then follow their instructions.