Is the security scan compatible with all languages?

Yes, the core security principles and the included scanning script are designed to be language-agnostic, targeting common patterns like shell execution, eval statements, and hardcoded strings.

Can I customize the security rules?

Yes, as a Claude Code skill, you can instruct Claude to prioritize specific security headers, auth patterns, or compliance requirements relevant to your specific project.

How does this skill prevent secret leakage?

It enforces strict rules against hardcoding credentials and provides an automated scan script that checks for API keys, private keys, and sensitive environment files before code is committed.

Does it replace manual security audits?

While it significantly reduces risk by enforcing best practices and catching common errors, it should be used as a primary defense layer alongside professional security reviews for high-stakes applications.

Security & Privacy Guard

Name: Security & Privacy Guard
Author: donotdonuts

bydonotdonuts

0•

安全与测试

Enforces security and privacy best practices to prevent secret leakage and unsafe code patterns during AI-assisted development.

The Security & Privacy Guard skill is a comprehensive safety framework for Claude Code designed to catch vulnerabilities before they reach production. It provides a rigorous set of rules and automated checks covering secrets management, input validation, dependency security, and data privacy. By integrating a pre-commit checklist and a dedicated scanning script, this skill ensures that Claude maintains high security standards, preventing common pitfalls like hardcoded credentials, injection flaws, and supply chain risks across every task.

主要功能

01Privacy-by-design principles for data handling and logging hygiene

02Injection prevention guidelines for SQL, shell, and HTML outputs

030 GitHub stars

04Supply chain protection via dependency pinning and verification rules

05Automated security scanning for hardcoded secrets and dangerous code patterns

06Comprehensive pre-commit checklist for systematic security validation

使用场景

01Auditing project dependencies and Docker configurations for security misconfigurations

02Hardening application code against SQL injection and path traversal attacks

03Preventing accidental leaks of API keys and credentials to version control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add donotdonuts/claude-workflow-skills security

For use in Claude.ai and ChatGPT

主要功能

01Privacy-by-design principles for data handling and logging hygiene

02Injection prevention guidelines for SQL, shell, and HTML outputs

030 GitHub stars

04Supply chain protection via dependency pinning and verification rules

05Automated security scanning for hardcoded secrets and dangerous code patterns

06Comprehensive pre-commit checklist for systematic security validation

使用场景

01Auditing project dependencies and Docker configurations for security misconfigurations

02Hardening application code against SQL injection and path traversal attacks

03Preventing accidental leaks of API keys and credentials to version control

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add donotdonuts/claude-workflow-skills security

For use in Claude.ai and ChatGPT