harperaa/secure-claude-skills
12 skills1.8k installs96 starsGitHub
Install
npx skills add https://github.com/harperaa/secure-claude-skillsSkills in this repo
1Dependency Supply Chain SecurityCovers dependency and supply-chain security practices for modern apps. Guides lockfile discipline, vulnerability scanning, provenance checks, and CI safeguards to reduce compromised or malicious package risk before release.201installs2Security Architecture OverviewGuides teams through security architecture overview for Claude skill and agent projects: threat surfaces, permission models, secret handling, and control placement so secure design is scoped before code ships.169installs3Rate LimitingSecure Claude skill for rate limiting: designing per-identity quotas, choosing algorithms, returning standards-compliant errors, persisting counters, and instrumenting limits so agent and API deployments resist abuse without breaking legitimate bursts.168installs4Csrf ProtectionImplements CSRF protection for web applications using tokens, cookie policies, and request validation. Helps secure state-changing routes, forms, and APIs so authenticated users cannot be tricked into unwanted actions.167installs5Secure Error HandlingDefines secure error-handling patterns that prevent information disclosure in APIs and UIs. Shows how to log richly server-side while returning generic, actionable client errors without exposing secrets, paths, or stack details.161installs6Input Validation Xss PreventionProvides patterns to validate and sanitize user input against XSS and injection attacks using schemas, encoding, output escaping, and defense-in-depth controls aligned with secure shipping checklists.160installs7Security HeadersGuides correct HTTP security header setup including Content-Security-Policy, HSTS, frame controls, and related directives to reduce XSS, clickjacking, and sensitive data leakage risks at launch.158installs8Authentication Authorization ClerkInstructs secure Clerk authentication and authorization integration covering sign-in flows, session management, role-based access, middleware guards, and API protection patterns for production SaaS applications.155installs9Payment Security Clerk Billing StripeSecures Clerk authentication and Stripe billing integrations for production SaaS and ecommerce. Covers webhook validation, session scoping, idempotent charges, and safe handling of payment metadata to prevent fraud and billing exploits.148installs10Security PromptsSupplies security-oriented prompt patterns and guardrails for Claude Code agents to avoid leaking secrets, generating vulnerable code, or bypassing policies during implementation, review, and pre-launch hardening workflows.146installs11Security Operations DeploymentCovers security operations and deployment for Claude skills: how to manage secrets, isolate environments, gate releases, and apply operational controls so agent tooling reaches production without exposing credentials or unsafe defaults.138installs12Security Testing Verificationsecurity-testing-verification is a Claude Code skill for testing & qa. It helps solo builders move faster with AI-assisted coding.1installs