What is the discover-security skill?

It is a discovery gateway for Claude Code that automatically identifies and loads specific security sub-skills based on your current coding task, such as authentication or input validation.

Can it help with OWASP compliance?

Yes, it includes specialized modules for vulnerability assessment and input validation specifically aligned with the OWASP Top 10 vulnerabilities.

When does this skill activate?

It auto-activates whenever Claude detects work related to security headers, authentication systems, API security, or data sanitization.

How does progressive loading work?

Instead of loading all security documentation at once, this skill helps Claude selectively load only relevant modules, saving tokens and improving the accuracy of security recommendations.

Does it support cloud secrets management?

Absolutely. It provides specific workflows for integrating with professional tools like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager.

Security Discovery & Hardening

Name: Security Discovery & Hardening
Author: rand

byrand

•

Security & Testing

Automates the identification and application of specialized security skills for authentication, vulnerability assessment, and application hardening.

About

This skill acts as an intelligent gateway for Claude Code, enabling context-aware discovery of specialized security sub-skills. It automatically activates during tasks involving authentication, authorization, secrets management, and OWASP-compliant vulnerability assessments. By providing a structured roadmap for security workflows—ranging from secure web application development to DevSecOps pipelines—it ensures that developers implement industry-standard best practices like input validation, security headers, and credential management while maintaining high context efficiency.

Key Features

Comprehensive coverage of OWASP Top 10 and vulnerability assessment
Structured workflows for Identity and Access Management (IAM)
57 GitHub stars
Progressive loading of specialized sub-skills to optimize token usage
Deep integration with API, Database, and Infrastructure security patterns
Context-aware auto-activation for security-sensitive coding tasks

Use Cases

Implementing secure Authentication and Authorization (JWT, OAuth2, RBAC)
Managing secrets and credentials using Vault or AWS Secrets Manager
Performing security audits and automated OWASP vulnerability testing

About

Key Features

Comprehensive coverage of OWASP Top 10 and vulnerability assessment
Structured workflows for Identity and Access Management (IAM)
57 GitHub stars
Progressive loading of specialized sub-skills to optimize token usage
Deep integration with API, Database, and Infrastructure security patterns
Context-aware auto-activation for security-sensitive coding tasks

Use Cases

Implementing secure Authentication and Authorization (JWT, OAuth2, RBAC)
Managing secrets and credentials using Vault or AWS Secrets Manager
Performing security audits and automated OWASP vulnerability testing