The Security Posture skill provides a comprehensive safety framework for Claude, mandating 16 specific invariants for every API route, user input handler, and data boundary. It automates security reviews by enforcing server-side isolation, strict environment variable validation via Zod, and robust protection against common vulnerabilities like SQL injection, XSS, and CSRF. Whether you are implementing Stripe webhooks, building dashboard routes, or managing Row Level Security (RLS), this skill ensures that every code change adheres to a unified security contract, preventing silent auth bypasses and sensitive data leaks.
Key Features
0116-point security invariant enforcement for all API routes
02Server-side isolation and environment variable synchronization
03Comprehensive XSS prevention and HTML escaping for email templates
04Secure webhook implementation patterns with signature verification
05Automated Zod schema validation for user-provided data
060 GitHub stars
