Security
A battle-tested Claude Code skill collection that enforces Plan→Execute→Verify→Handoff workflow. Auto-triggers brainstorming, planning, debugging, UI/UX, security, and review skills.
npx -y skills add kjhk3082/master-assistant-skill --skill securityAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
[EN] You MUST use this when writing or reviewing code that handles user input, authentication, authorization, or sensitive data. Enforces secure coding practices. [KO] 사용자 입력, 인증, 권한 부여 또는 민감한 데이터를 처리하는 코드를 작성하거나 검토할 때 반드시 사용해야 합니다. 안전한 코딩 관행을 강제합니다.
SKILL.md
1.4 KB, 203 tokens by cl100k_base, as published. Nobody here has run it
Secure Coding Practices
Guidelines for writing secure code and preventing common vulnerabilities.
<HARD-GATE> Do NOT trust user input. Always validate, sanitize, and escape data before processing, storing, or displaying it. </HARD-GATE>Core Security Principles
- Defense in Depth: Implement multiple layers of security controls
- Least Privilege: Grant only the minimum necessary permissions
- Fail Securely: Handle errors gracefully without exposing sensitive information
- Keep It Simple: Avoid unnecessary complexity that can introduce vulnerabilities
Implementation Checklist
- Validate all user input (type, length, format, range)
- Use parameterized queries or ORMs to prevent SQL injection
- Escape output to prevent Cross-Site Scripting (XSS)
- Implement proper authentication and authorization checks
- Securely store and transmit sensitive data (encryption, hashing)
- Avoid hardcoding secrets or credentials in source code