How does this skill help with secret management?

It provides specific workflows and pre-commit checks to prevent committing secrets to version control, while guiding developers on using environment variables and platform-specific secret managers like Railway.

Can it detect AI prompt injection?

Yes, it includes a library of common jailbreak patterns and implementation logic to identify and mitigate attempts to override AI instructions or bypass safety filters.

What is Economic DoS prevention in this context?

It refers to implementing token budgeting and rate limiting per user to ensure that AI API costs remain within a sustainable financial limit, preventing malicious or accidental resource exhaustion.

How does it handle personally identifiable information (PII)?

The skill provides regex-based scrubbing techniques to redact sensitive information like emails, phone numbers, and SSNs before data is sent to AI providers or stored in vector embeddings.

Tzurot Security & Best Practices

Name: Tzurot Security & Best Practices
Author: lbds137

bylbds137

•

安全与测试

Secures Discord bots and AI applications by implementing secret management, PII scrubbing, and prompt injection defense.

This skill provides a comprehensive security framework for the Tzurot v3 Discord bot ecosystem, focusing on preventing secret leaks, managing AI-related risks like prompt injection, and ensuring robust Discord permission handling. It offers practical, production-ready guidance on scrubbing PII from embeddings, preventing economic DoS through token budgeting, and maintaining supply chain integrity through dependency auditing, making it an essential tool for developers building secure, AI-integrated chat applications.

主要功能

017 GitHub stars

02AI-specific security including prompt injection detection and PII scrubbing

03Economic DoS prevention via Redis-based token budgeting and rate limiting

04Automated secret detection and environment variable management workflows

05Supply chain integrity tools for dependency auditing and version pinning

06Secure Discord interaction handling and server-side permission verification

使用场景

01Implementing robust server-side permission checks for administrative Discord bot commands

02Preventing sensitive API keys and database URLs from being committed to Git history

03Sanitizing user input before processing with AI models or storing in vector databases

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add lbds137/tzurot tzurot-security

For use in Claude.ai and ChatGPT

Download Skill