harperaa/secure-claude-skills
12 skills2.3k installs180 starsGitHub
Install
npx skills add https://github.com/harperaa/secure-claude-skillsSkills in this repo
1Dependency Supply Chain Securitydependency-supply-chain-security is an agent skill that helps identify and mitigate risks in the dependency supply chain of coding projects. It is especially relevant for AI agent skills and Claude Code workflows where third-party packages can introduce vulnerabilities. The skill supports secure development practices by scanning and recommending controls for dependencies.234installs2Csrf ProtectionImplements CSRF protection for web applications using tokens, cookie policies, and request validation. Helps secure state-changing routes, forms, and APIs so authenticated users cannot be tricked into unwanted actions.194installs3Security HeadersGuides correct HTTP security header setup including Content-Security-Policy, HSTS, frame controls, and related directives to reduce XSS, clickjacking, and sensitive data leakage risks at launch.193installs4Rate LimitingSecure Claude skill for rate limiting: designing per-identity quotas, choosing algorithms, returning standards-compliant errors, persisting counters, and instrumenting limits so agent and API deployments resist abuse without breaking legitimate bursts.192installs5Input Validation Xss PreventionProvides patterns to validate and sanitize user input against XSS and injection attacks using schemas, encoding, output escaping, and defense-in-depth controls aligned with secure shipping checklists.189installs6Secure Error HandlingDefines secure error-handling patterns that prevent information disclosure in APIs and UIs. Shows how to log richly server-side while returning generic, actionable client errors without exposing secrets, paths, or stack details.189installs7Security Testing VerificationRuns bundled automated scripts and manual checks to verify rate limiting, CSRF protection, input validation, and security headers against a pre-deployment checklist. A developer uses it to confirm security controls work before shipping.188installs8Security Architecture OverviewGuides teams through security architecture overview for Claude skill and agent projects: threat surfaces, permission models, secret handling, and control placement so secure design is scoped before code ships.186installs9Security PromptsSupplies security-oriented prompt patterns and guardrails for Claude Code agents to avoid leaking secrets, generating vulnerable code, or bypassing policies during implementation, review, and pre-launch hardening workflows.177installs10Authentication Authorization ClerkInstructs secure Clerk authentication and authorization integration covering sign-in flows, session management, role-based access, middleware guards, and API protection patterns for production SaaS applications.176installs11Payment Security Clerk Billing StripeSecures Clerk authentication and Stripe billing integrations for production SaaS and ecommerce. Covers webhook validation, session scoping, idempotent charges, and safe handling of payment metadata to prevent fraud and billing exploits.175installs12Security Operations DeploymentCovers security operations and deployment for Claude skills: how to manage secrets, isolate environments, gate releases, and apply operational controls so agent tooling reaches production without exposing credentials or unsafe defaults.157installs