Can Claude Code find hardcoded secrets with this skill?

Yes, the skill includes specialized grep patterns and scripts specifically designed to identify hardcoded passwords, tokens, and API keys within your local files.

Can this skill help with setting up security headers?

Absolutely. It includes recommended configurations for Content-Security-Policy (CSP), HSTS, and other essential HTTP security headers to harden your web application.

Is this security skill language-agnostic?

Yes, the patterns are designed to be language-agnostic, providing conceptual guidance that can be applied to any stack, though it includes specific examples for Python, JavaScript, and Bash.

Does this cover the latest OWASP Top 10?

Yes, it includes a quick reference and implementation guide for the core vulnerabilities listed in the OWASP Top 10, from Broken Access Control to SSRF.

How does it help with input validation?

It provides standardized rules for validating data types, lengths, ranges, and formats using allowlists to ensure that no untrusted user input reaches your database or execution layer.

Security Patterns & OWASP Best Practices

Name: Security Patterns & OWASP Best Practices
Author: 0xDarkMatter

by0xDarkMatter

•

Seguridad y Pruebas

Implements secure coding standards and OWASP-aligned patterns to protect applications from vulnerabilities like SQL injection, XSS, and broken authentication.

This skill equips Claude with a comprehensive library of security patterns and OWASP Top 10 guidelines to facilitate secure software development and automated auditing. It provides language-agnostic patterns for critical tasks such as input validation, output encoding, and secrets management, while offering specific implementation examples for modern frameworks. By integrating diagnostic scripts and checklists, it helps developers identify risky code patterns, prevent credential leaks, and ensure that authentication and authorization logic follows industry-standard security protocols.

Características Principales

01Secrets management protocols to prevent credential leaks and hardcoded keys

02Diagnostic grep scripts for automated scanning of risky code and security TODOs

034 GitHub stars

04Standardized patterns for Input Validation and context-aware Output Encoding

05Secure Authentication and Authorization checklists including MFA and RBAC

06OWASP Top 10 vulnerability reference and targeted prevention strategies

Casos de Uso

01Scanning local repositories for accidentally committed secrets or API keys before deployment

02Performing a security audit on a codebase to identify potential injection or XSS vulnerabilities

03Designing a secure authentication workflow with proper password hashing and session management

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add 0xdarkmatter/claude-mods security-patterns

For use in Claude.ai and ChatGPT

Download Skill