Security Practices skills for AI agents
8 practitioner-grade security practices skills, each a focused Markdown document your agent loads into context on demand. Search them from Claude Desktop, Cursor or any MCP client, or pull one with the CLI.
All 8 skills
- Content Security Policy
Configure Content-Security-Policy headers to mitigate XSS, data injection, and clickjacking attacks.
269 lines - CORS Security
Configure CORS headers correctly to control cross-origin resource access while preventing overly permissive policies.
230 lines - CSRF Protection
Protect web applications against cross-site request forgery (CSRF) using tokens, SameSite cookies, and origin validation.
247 lines - Input Validation
Validate and sanitize all user input at application boundaries using schemas, type coercion, and allowlists.
267 lines - Secrets Management
Securely store, access, rotate, and audit application secrets and credentials using vaults, environment variables, and CI/CD integrations.
297 lines - SQL Injection
Prevent SQL injection attacks using parameterized queries, ORM best practices, and input validation layers.
238 lines - Supply Chain Security
Secure your software supply chain by auditing dependencies, pinning versions, verifying integrity, and monitoring for vulnerabilities.
316 lines - XSS Prevention
Prevent cross-site scripting (XSS) attacks through output encoding, input sanitization, and secure rendering practices.
195 lines