How does it improve the security of my code reviews?

It analyzes code for common security pitfalls such as hardcoded secrets, insufficient server-side permission checks, and information leaks in error messages.

Does this skill help with cryptographic implementations?

Yes, it provides guidance on using standard libraries and modern algorithms like Argon2 or AES-GCM while strictly discouraging the use of deprecated or custom crypto.

When should I use this security skill?

Use it whenever your project involves user authentication, processing untrusted input, handling sensitive data, or meeting compliance standards like GDPR, HIPAA, or SOC2.

Does it support secrets management best practices?

Absolutely. It enforces the use of secret managers and environment injection while warning against committing secrets to version control or logging them.

What is the Security Engineering skill for Claude Code?

It is a specialized plugin that guides Claude to apply security best practices, such as threat modeling and input validation, during system design and code reviews.

Security Engineering

Name: Security Engineering
Author: ragnarula

byragnarula

0•

보안 및 테스팅

Applies adversarial thinking and robust security patterns to design, review, and harden software systems against vulnerabilities.

The Security Engineering skill equips Claude with a rigorous framework for identifying and mitigating security risks across the entire software development lifecycle. By adopting an attacker’s mindset, it helps developers define trust boundaries, validate inputs, manage sensitive secrets, and implement industry-standard authentication and authorization patterns. This skill ensures that security is a core architectural requirement rather than an afterthought, providing specific guidance on cryptographic best practices, data protection, and the prevention of common vulnerabilities like the OWASP Top 10.

주요 기능

01Comprehensive input validation and data protection strategies

02Security-focused code review and audit log design

03Hardened secrets management and cryptographic best practices

040 GitHub stars

05Secure authentication and authorization pattern implementation

06Adversarial threat modeling and trust boundary identification

사용 사례

01Architecting multi-tenant isolation and principle of least privilege access controls

02Reviewing existing codebases for sensitive data leaks, hardcoded secrets, or injection risks

03Designing secure authentication systems using established protocols like OAuth2 and OIDC

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add ragnarula/cc-plugins security

For use in Claude.ai and ChatGPT

Download Skill