Can Claude Code find hardcoded secrets with this skill?

Yes, the skill includes specialized grep patterns and scripts specifically designed to identify hardcoded passwords, tokens, and API keys within your local files.

Can this skill help with setting up security headers?

Absolutely. It includes recommended configurations for Content-Security-Policy (CSP), HSTS, and other essential HTTP security headers to harden your web application.

Is this security skill language-agnostic?

Yes, the patterns are designed to be language-agnostic, providing conceptual guidance that can be applied to any stack, though it includes specific examples for Python, JavaScript, and Bash.

Does this cover the latest OWASP Top 10?

Yes, it includes a quick reference and implementation guide for the core vulnerabilities listed in the OWASP Top 10, from Broken Access Control to SSRF.

How does it help with input validation?

It provides standardized rules for validating data types, lengths, ranges, and formats using allowlists to ensure that no untrusted user input reaches your database or execution layer.

Security Patterns & OWASP Best Practices

Name: Security Patterns & OWASP Best Practices
Author: 0xDarkMatter

by0xDarkMatter

•

セキュリティとテスト

Implements secure coding standards and OWASP-aligned patterns to protect applications from vulnerabilities like SQL injection, XSS, and broken authentication.

概要

This skill equips Claude with a comprehensive library of security patterns and OWASP Top 10 guidelines to facilitate secure software development and automated auditing. It provides language-agnostic patterns for critical tasks such as input validation, output encoding, and secrets management, while offering specific implementation examples for modern frameworks. By integrating diagnostic scripts and checklists, it helps developers identify risky code patterns, prevent credential leaks, and ensure that authentication and authorization logic follows industry-standard security protocols.

主な機能

Secrets management protocols to prevent credential leaks and hardcoded keys
Diagnostic grep scripts for automated scanning of risky code and security TODOs
4 GitHub stars
Standardized patterns for Input Validation and context-aware Output Encoding
Secure Authentication and Authorization checklists including MFA and RBAC
OWASP Top 10 vulnerability reference and targeted prevention strategies

ユースケース

Scanning local repositories for accidentally committed secrets or API keys before deployment
Performing a security audit on a codebase to identify potential injection or XSS vulnerabilities
Designing a secure authentication workflow with proper password hashing and session management

概要

主な機能

Secrets management protocols to prevent credential leaks and hardcoded keys
Diagnostic grep scripts for automated scanning of risky code and security TODOs
4 GitHub stars
Standardized patterns for Input Validation and context-aware Output Encoding
Secure Authentication and Authorization checklists including MFA and RBAC
OWASP Top 10 vulnerability reference and targeted prevention strategies

ユースケース

Scanning local repositories for accidentally committed secrets or API keys before deployment
Performing a security audit on a codebase to identify potential injection or XSS vulnerabilities
Designing a secure authentication workflow with proper password hashing and session management