Install portable, project-agnostic security guardrails that stop AI coding agents from reading or exfiltrating credentials and secrets (SSH/AWS/GCP keys, .env files, *.pem/*.key, tokens, shell history, terraform state). Copy the folder into any project's .claude/skills/ and run it to wire up a deny list PLUS a PreToolUse hook that blocks shell reads (cat/less/grep/cp) the deny list misses. Use whenever the user wants to harden a repo, protect secrets from agents, set up agent security/guardrails, prevent the agent from reading .env / .ssh / credentials, or asks to "lock down" what an agent can touch.
How to install security-guardrails?
ibrahimkobeissy/ai-second-brain-template/security-guardrails
$npx -y skills add ibrahimkobeissy/ai-second-brain-template --skill security-guardrailsInstalls into the current project.
›Prefer a prompt? Paste this to your agent
Run `npx skills use "https://github.com/ibrahimkobeissy/ai-second-brain-template" --skill "ibrahimkobeissy/ai-second-brain-template/security-guardrails"` and follow the generated skill instructions now. Read its complete output, redirecting it to a temporary file first if necessary. Resolve relative paths from the supporting-files directory it provides.
Use the skills in "https://github.com/ibrahimkobeissy/ai-second-brain-template" that are relevant to the current task. Run `npx skills add "https://github.com/ibrahimkobeissy/ai-second-brain-template"` and select the relevant skills, then follow their instructions.
Related
6 picksType
- entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.Jul 2026
- azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks.Jul 2026
- entra-agent-idProvision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token…Jul 2026
- firebase-security-rules-auditorAudits Firebase (Firestore, Cloud Storage) security rules for vulnerabilities, privilege escalation, role bypasses, create vs update inconsistencies, resource…Jul 2026
- golang-securitySecurity best practices and vulnerability prevention for Golang.Jul 2026
- gws-modelarmorGoogle Model Armor: Filter user-generated content for safety.Jul 2026
