Security

Use this skill when implementing security measures or conducting security audits. Provides OWASP Top 10 mitigations, authentication patterns, input validation strategies, and compliance guidelines. Ensures applications are secure against common vulnerabilities.

GitHub Actions security and authentication for Claude Code including API keys, OIDC, AWS Bedrock, Google Vertex AI, secrets management, and permission scoping. Use when setting up authentication or discussing security for GitHub Actions workflows.

ArgoCD CLI authentication with SSO. Provides argocd login command, gRPC-Webconfiguration, and post-login operations. Use when user mentions ArgoCD login,argocd authentication, SSO auth, or accessing ArgoCD applications and clusters.

Use this skill when designing REST, GraphQL, or gRPC APIs. Provides comprehensive API design patterns, versioning strategies, error handling conventions, authentication approaches, and OpenAPI/AsyncAPI templates. Ensures consistent, well-documented, and developer-friendly APIs across all backend services.

Container development with Docker, Dockerfiles, 12-factor principles, multi-stagebuilds, and Skaffold workflows. Enforces MANDATORY non-root users, minimal Alpine/slimbase images, and security hardening. Covers containerization, orchestration, and secureimage construction.Use when user mentions Docker, Dockerfile, containers, docker-compose, multi-stagebuilds, container images, container security, or 12-factor app principles.

SQLite operations using better-sqlite3 with prepared statements. Use when implementing CRUD operations, timestamps, and user-scoped queries with row-level security.

Builds remote MCP (Model Context Protocol) servers on Cloudflare Workerswith tools, OAuth authentication, and production deployment. Generatesserver code, configures auth providers, and deploys to Workers.Use when: user wants to "build MCP server", "create MCP tools", "remoteMCP", "deploy MCP", add "OAuth to MCP", or mentions Model Context Protocolon Cloudflare. Also triggers on "MCP authentication" or "MCP deployment".

Update Bun lockfiles (bun.lockb) with proper dependency management. Coversbun update, bun install, lockfile regeneration, and security audits.Use when user mentions bun lockfile, bun update, bun.lockb, updating Bundependencies, or resolving Bun lockfile conflicts.

OWASP Top 10 security vulnerabilities and mitigations. Use when conducting security audits, implementing security controls, or reviewing code for common vulnerabilities.

Validate git commit messages, branch naming conventions, and check for sensitive files. Returns structured output with commit format validation, branch name compliance, and sensitive file detection (.env, credentials, .pem, .key). Used for git workflow validation and security checks.

Guidelines for containerized projects using Docker, Dockerfile, docker-compose, container, and containerization. Covers multi-stage builds, security, signal handling, entrypoint scripts, and deployment workflows.

Comprehensive SecOps skill for application security, vulnerability management, compliance, and secure development practices. Includes security scanning, vulnerability assessment, compliance checking, and security automation. Use when implementing security controls, conducting security audits, responding to vulnerabilities, or ensuring compliance requirements.

Provides code auditing methodology, checklists, and best practices. Use when user asks to "audit code", "find technical debt", "security review", "identify dead code", "analyze code quality", or "check best practices".

Authentication and authorization patterns. Use when implementing login flows, JWT tokens, session management, password security, or role-based access control.

Comprehensive backend development skill for building scalable backend systems using Node.js, Express, Go, Python, PostgreSQL, GraphQL, REST APIs. Includes API scaffolding, database optimization, security implementation, and performance tuning. Use when designing APIs, optimizing database queries, implementing business logic, handling authentication/authorization, or reviewing backend code.

Guidelines for structured logging, distributed tracing, and debugging patterns across languages. Covers logging best practices, observability, security considerations, and performance analysis.

Search code across repositories using Sourcegraph CLI. Invoke when researching codebases, finding implementation examples, analyzing code patterns, understanding how features work across projects, or answering questions about existing code. Use for cross-repository searches, finding specific patterns, exploring API usage, or locating security issues.

Autonomously search the user's elfeed RSS feed database when researching topics they've read about, finding specific articles they mention, analyzing their reading patterns, or gathering context from their curated information sources. Invoke when the user references articles, asks about past reads, or when conversation topics overlap with likely RSS feed content (tech, programming, AI, security, etc.).

Writing Datasette plugins using Python and the pluggy plugin system. Use when Claude needs to: (1) Create a new Datasette plugin, (2) Implement plugin hooks like prepare_connection, register_routes, render_cell, etc., (3) Add custom SQL functions, (4) Create custom output renderers, (5) Add authentication or permissions logic, (6) Extend Datasette's UI with menus, actions, or templates, (7) Package a plugin for distribution on PyPI

Performs comprehensive code reviews for Python files following PEP 8 and Google Python Style Guide standards. Checks code quality, best practices, security, performance, maintainability, and style compliance. Use when reviewing Python code or when asked to check, audit, or improve Python code quality.