How does it improve the security of my code reviews?

It analyzes code for common security pitfalls such as hardcoded secrets, insufficient server-side permission checks, and information leaks in error messages.

Does this skill help with cryptographic implementations?

Yes, it provides guidance on using standard libraries and modern algorithms like Argon2 or AES-GCM while strictly discouraging the use of deprecated or custom crypto.

When should I use this security skill?

Use it whenever your project involves user authentication, processing untrusted input, handling sensitive data, or meeting compliance standards like GDPR, HIPAA, or SOC2.

Does it support secrets management best practices?

Absolutely. It enforces the use of secret managers and environment injection while warning against committing secrets to version control or logging them.

What is the Security Engineering skill for Claude Code?

It is a specialized plugin that guides Claude to apply security best practices, such as threat modeling and input validation, during system design and code reviews.

Security Engineering

Name: Security Engineering
Author: ragnarula

byragnarula

安全与测试

Applies adversarial thinking and robust security patterns to design, review, and harden software systems against vulnerabilities.

关于

The Security Engineering skill equips Claude with a rigorous framework for identifying and mitigating security risks across the entire software development lifecycle. By adopting an attacker’s mindset, it helps developers define trust boundaries, validate inputs, manage sensitive secrets, and implement industry-standard authentication and authorization patterns. This skill ensures that security is a core architectural requirement rather than an afterthought, providing specific guidance on cryptographic best practices, data protection, and the prevention of common vulnerabilities like the OWASP Top 10.

主要功能

Comprehensive input validation and data protection strategies
Security-focused code review and audit log design
Hardened secrets management and cryptographic best practices
0 GitHub stars
Secure authentication and authorization pattern implementation
Adversarial threat modeling and trust boundary identification

使用场景

Architecting multi-tenant isolation and principle of least privilege access controls
Reviewing existing codebases for sensitive data leaks, hardcoded secrets, or injection risks
Designing secure authentication systems using established protocols like OAuth2 and OIDC

关于

主要功能

Comprehensive input validation and data protection strategies
Security-focused code review and audit log design
Hardened secrets management and cryptographic best practices
0 GitHub stars
Secure authentication and authorization pattern implementation
Adversarial threat modeling and trust boundary identification

使用场景

Architecting multi-tenant isolation and principle of least privilege access controls
Reviewing existing codebases for sensitive data leaks, hardcoded secrets, or injection risks
Designing secure authentication systems using established protocols like OAuth2 and OIDC