Turn bookmarks into markdown for your agents
Turn X bookmarks, Chrome tabs + YouTube URLs into markdown for agents 🦞 ↗
home / skills / harperaa / secure-claude-skills
harperaa/secure-claude-skills
23 skills
GitHubSponsored
payment-security
harperaa/secure-claude-skills
4
This skill helps you implement secure payments using Clerk Billing and Stripe without handling card data, ensuring PCI-DSS compliance and seamless
rate-limiting
harperaa/secure-claude-skills
4
Implement rate limiting to prevent brute force attacks, spam, and resource abuse. Use this skill when you need to protect endpoints from automated attacks, prevent API abuse, limit request frequency, or control infrastructure costs. Triggers include "rate limiting", "rate limit", "brute force", "prevent spam", "API abuse", "resource exhaustion", "DoS", "withRateLimit", "too many requests", "429 error".
information-leakage
harperaa/secure-claude-skills
4
This skill helps you identify and mitigate hardcoded secrets and verbose logging in AI-generated code, preventing information leakage and credential exposure.
built-in-controls
harperaa/secure-claude-skills
4
This skill provides quick, secure templates for common features using existing utilities, enabling fast, safe implementations like contact forms and public
injection-vulnerabilities
harperaa/secure-claude-skills
4
This skill analyzes AI-generated code to identify and explain injection vulnerabilities such as SQL injection, command injection, and XSS, with secure
prompt-engineering
harperaa/secure-claude-skills
4
This skill provides comprehensive security prompt templates to implement multi-layer security features across forms, endpoints, and admin workflows.
supply-chain-risks
harperaa/secure-claude-skills
4
This skill helps you assess and mitigate supply chain risks in AI-generated code by identifying outdated, vulnerable, and malicious dependencies.
awareness-overview
harperaa/secure-claude-skills
4
This skill helps you understand AI-generated code security risks and practical mitigation strategies for vibe coding, improving secure development awareness.
auth-security
harperaa/secure-claude-skills
4
This skill secures your application with Clerk authentication and authorization, protecting routes, verifying permissions, and enforcing subscription-based
input-validation
harperaa/secure-claude-skills
4
Validate and sanitize user input to prevent XSS, injection attacks, and ensure data quality. Use this skill when you need to validate forms, sanitize user input, prevent cross-site scripting, use Zod schemas, or handle any user-generated content. Triggers include "input validation", "validate input", "XSS", "cross-site scripting", "sanitize", "Zod", "injection prevention", "validateRequest", "safeTextSchema", "user input security".
auth-vulnerabilities
harperaa/secure-claude-skills
4
This skill analyzes AI-generated authentication and session management code to identify insecure password storage and broken access controls, guiding secure
security-overview
harperaa/secure-claude-skills
4
This skill helps you understand the defense-in-depth security architecture of Secure Vibe Coding OS across its 5-layer stack and OWASP scoring.
threat-modeling
harperaa/secure-claude-skills
4
Security analysis and threat modeling prompt templates for STRIDE analysis, code review, OWASP compliance, and vulnerability assessment. Use for security planning, pre-deployment reviews, and ongoing threat assessment. Triggers include "STRIDE", "threat model", "security review", "code review", "OWASP", "payment security", "security analysis", "vulnerability assessment".
csrf-protection
harperaa/secure-claude-skills
4
This skill helps you secure API routes from cross-site attacks by implementing CSRF protection with token validation.
error-handling
harperaa/secure-claude-skills
4
This skill helps you implement secure error handling to prevent information leakage and provide safe, environment-aware error responses.
dependency-security
harperaa/secure-claude-skills
4
This skill helps you audit, update, and secure npm dependencies to prevent supply chain attacks and vulnerabilities.
business-logic-flaws
harperaa/secure-claude-skills
4
This skill helps you identify and remediate race conditions, integer overflows, and calculation errors in AI-generated JavaScript code to secure business logic.
resource-exhaustion
harperaa/secure-claude-skills
4
This skill helps identify and mitigate resource exhaustion and DoS risks in AI-generated code by applying rate limits, quotas, and secure processing.
security-operations
harperaa/secure-claude-skills
4
This skill guides secure deployment by applying rate limiting, CSRF, environment variable validation, and pre-deployment checks to protect production.
security-headers
harperaa/secure-claude-skills
4
This skill configures and enforces security headers (CSP, X-Frame-Options, HSTS, etc.) via middleware to protect against clickjacking, XSS, and MIME sniffing.
security-testing
harperaa/secure-claude-skills
4
This skill helps you validate security features before deployment by testing CSRF, rate limiting, input validation, and security headers.
auth-authorization
harperaa/secure-claude-skills
4
This skill helps you implement secure access control with RBAC, ownership checks, permissions, and testing templates for robust authorization.
security-prompts
harperaa/secure-claude-skills
4
This skill helps you perform proactive threat modeling and security reviews using STRIDE, OWASP, and code review templates to identify vulnerabilities.