Does this skill help with OWASP compliance?

Yes, it includes specialized guides and checklists specifically tailored to address the current OWASP Top 10 vulnerabilities.

What is the primary function of the Security CodeGuard skill?

Its primary function is to mandate and facilitate automated security reviews using the CodeGuard tool while providing standardized patterns for secure code implementation.

How does the skill handle sensitive information like API keys?

It enforces the use of environment variables and strictly prohibits hardcoding secrets, providing clear patterns for secure configuration management.

When is it mandatory to run the CodeGuard security check?

The check is mandatory upon the completion of all code implementations, as well as during external input processing and authentication setup.

What happens if CodeGuard detects a vulnerability?

The skill workflow requires that all identified issues be fixed and re-verified through CodeGuard before the implementation can be finalized.

Security CodeGuard

Name: Security CodeGuard
Author: sumik5

bysumik5

安全与测试

Enforces secure coding practices through mandatory CodeGuard security audits and OWASP-compliant implementation patterns.

关于

Security CodeGuard is a specialized skill designed to embed security into the development lifecycle of Claude Code. It mandates a rigorous security check using the CodeGuard tool upon the completion of any code implementation, ensuring that vulnerabilities like SQL injection, XSS, and CSRF are identified and remediated early. The skill provides developers with standardized patterns for input validation, secrets management, and authentication, alongside comprehensive guides for mitigating the OWASP Top 10. By integrating automated scanning with domain-specific best practices, it helps maintain a 'Security First' approach for modern application development.

主要功能

Mandatory CodeGuard integration for automated vulnerability scanning
Detailed implementation patterns for OWASP Top 10 mitigation
Comprehensive pre-deployment security checklists for API and auth logic
Standardized input validation and sanitization using Zod and DOMPurify
0 GitHub stars
Secure secrets management workflows to prevent credential leakage

使用场景

Securing legacy codebases against modern injection and cross-site scripting attacks
Performing automated security audits during the final phase of feature development
Implementing production-grade authentication and authorization systems

关于

主要功能

Mandatory CodeGuard integration for automated vulnerability scanning
Detailed implementation patterns for OWASP Top 10 mitigation
Comprehensive pre-deployment security checklists for API and auth logic
Standardized input validation and sanitization using Zod and DOMPurify
0 GitHub stars
Secure secrets management workflows to prevent credential leakage

使用场景

Securing legacy codebases against modern injection and cross-site scripting attacks
Performing automated security audits during the final phase of feature development
Implementing production-grade authentication and authorization systems