Does it support automated security scanning?

Absolutely. It integrates with tools like Semgrep for SAST, Gitleaks for secret detection, and dependency auditors to ensure code remains secure throughout the lifecycle.

Can I use this for PII and GDPR compliance?

Yes, it includes PII masking patterns using Microsoft Presidio and Langfuse callbacks to redact sensitive information from logs and observability traces.

What security standards does this skill implement?

The skill follows industry-standard frameworks including OWASP Top 10, OAuth 2.1, and defense-in-depth architectures using modern libraries like Zod and Pydantic.

How does this skill protect against LLM-specific threats?

It provides specific patterns for prompt injection defense, context separation (keeping IDs away from LLMs), and output validation pipelines to prevent hallucinations or unsafe content.

What authentication methods are supported?

The skill supports JWT management, OAuth 2.1 with PKCE, Passkeys/WebAuthn, and Role-Based Access Control (RBAC) implementations.

Security Patterns

Name: Security Patterns
Author: yonatangross

byyonatangross

•

116

•

安全与测试

Implements production-ready security patterns for authentication, defense-in-depth, input validation, and LLM safety protocols.

This high-complexity skill provides a comprehensive framework for building hardened applications by applying industry-standard security patterns directly within Claude Code. It covers critical security domains such as OAuth 2.1/PKCE authentication, Zod-based input validation, OWASP Top 10 mitigation, and specialized LLM safety measures like prompt injection defense and PII masking. Designed for developers architecting resilient systems, it guides the implementation of multi-layered security architectures and integrates automated scanning tools to detect vulnerabilities and secrets before they reach production.

主要功能

01Automated security scanning integration with Semgrep, Bandit, Gitleaks, and TruffleHog.

02Comprehensive authentication flows including JWT, OAuth 2.1 with PKCE, and Passkeys/WebAuthn.

03PII detection and redaction using Microsoft Presidio and Langfuse for GDPR-compliant observability.

04Robust input validation using Zod v4 and Pydantic schemas to prevent injection and XSS.

05Specialized LLM safety patterns for prompt injection defense, context separation, and output guardrails.

06116 GitHub stars

使用场景

01Architecting a secure, zero-trust authentication and authorization system for full-stack applications.

02Automating security audits and vulnerability scanning within the development workflow or CI/CD pipeline.

03Hardening LLM integrations against prompt injection and sensitive data leakage in logs.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add yonatangross/orchestkit security-patterns

For use in Claude.ai and ChatGPT

Download Skill