playbooks

home / skills / harperaa / secure-claude-skills

harperaa/secure-claude-skills

23 skills
GitHub

Sponsored

supply-chain-risks

harperaa/secure-claude-skills

4
This skill helps you assess and mitigate supply chain risks in AI-generated code by identifying outdated, vulnerable, and malicious dependencies.
awareness-overview

harperaa/secure-claude-skills

4
This skill helps you understand AI-generated code security risks and practical mitigation strategies for vibe coding, improving secure development awareness.
rate-limiting

harperaa/secure-claude-skills

4
Implement rate limiting to prevent brute force attacks, spam, and resource abuse. Use this skill when you need to protect endpoints from automated attacks, prevent API abuse, limit request frequency, or control infrastructure costs. Triggers include "rate limiting", "rate limit", "brute force", "prevent spam", "API abuse", "resource exhaustion", "DoS", "withRateLimit", "too many requests", "429 error".
auth-security

harperaa/secure-claude-skills

4
This skill secures your application with Clerk authentication and authorization, protecting routes, verifying permissions, and enforcing subscription-based
input-validation

harperaa/secure-claude-skills

4
Validate and sanitize user input to prevent XSS, injection attacks, and ensure data quality. Use this skill when you need to validate forms, sanitize user input, prevent cross-site scripting, use Zod schemas, or handle any user-generated content. Triggers include "input validation", "validate input", "XSS", "cross-site scripting", "sanitize", "Zod", "injection prevention", "validateRequest", "safeTextSchema", "user input security".
Advertise on playbooks
Reach thousands of developers actively evaluating dev tools, MCP servers, and agent skills. Floating banners, pinned cards, and in-feed placements.
learn more
auth-vulnerabilities

harperaa/secure-claude-skills

4
This skill analyzes AI-generated authentication and session management code to identify insecure password storage and broken access controls, guiding secure
information-leakage

harperaa/secure-claude-skills

4
This skill helps you identify and mitigate hardcoded secrets and verbose logging in AI-generated code, preventing information leakage and credential exposure.
security-overview

harperaa/secure-claude-skills

4
This skill helps you understand the defense-in-depth security architecture of Secure Vibe Coding OS across its 5-layer stack and OWASP scoring.
built-in-controls

harperaa/secure-claude-skills

4
This skill provides quick, secure templates for common features using existing utilities, enabling fast, safe implementations like contact forms and public
threat-modeling

harperaa/secure-claude-skills

4
Security analysis and threat modeling prompt templates for STRIDE analysis, code review, OWASP compliance, and vulnerability assessment. Use for security planning, pre-deployment reviews, and ongoing threat assessment. Triggers include "STRIDE", "threat model", "security review", "code review", "OWASP", "payment security", "security analysis", "vulnerability assessment".
csrf-protection

harperaa/secure-claude-skills

4
This skill helps you secure API routes from cross-site attacks by implementing CSRF protection with token validation.
error-handling

harperaa/secure-claude-skills

4
This skill helps you implement secure error handling to prevent information leakage and provide safe, environment-aware error responses.
dependency-security

harperaa/secure-claude-skills

4
This skill helps you audit, update, and secure npm dependencies to prevent supply chain attacks and vulnerabilities.
payment-security

harperaa/secure-claude-skills

4
This skill helps you implement secure payments using Clerk Billing and Stripe without handling card data, ensuring PCI-DSS compliance and seamless
business-logic-flaws

harperaa/secure-claude-skills

4
This skill helps you identify and remediate race conditions, integer overflows, and calculation errors in AI-generated JavaScript code to secure business logic.
resource-exhaustion

harperaa/secure-claude-skills

4
This skill helps identify and mitigate resource exhaustion and DoS risks in AI-generated code by applying rate limits, quotas, and secure processing.
security-operations

harperaa/secure-claude-skills

4
This skill guides secure deployment by applying rate limiting, CSRF, environment variable validation, and pre-deployment checks to protect production.
injection-vulnerabilities

harperaa/secure-claude-skills

4
This skill analyzes AI-generated code to identify and explain injection vulnerabilities such as SQL injection, command injection, and XSS, with secure
security-headers

harperaa/secure-claude-skills

4
This skill configures and enforces security headers (CSP, X-Frame-Options, HSTS, etc.) via middleware to protect against clickjacking, XSS, and MIME sniffing.
security-testing

harperaa/secure-claude-skills

4
This skill helps you validate security features before deployment by testing CSRF, rate limiting, input validation, and security headers.
auth-authorization

harperaa/secure-claude-skills

4
This skill helps you implement secure access control with RBAC, ownership checks, permissions, and testing templates for robust authorization.
prompt-engineering

harperaa/secure-claude-skills

4
This skill provides comprehensive security prompt templates to implement multi-layer security features across forms, endpoints, and admin workflows.