security-practices
Security practices including secrets management, input validation, SSRF prevention, and production hardening. Use for security-sensitive code.
$ インストール
git clone https://github.com/eser/stack /tmp/stack && cp -r /tmp/stack/.claude/skills/security-practices ~/.claude/skills/stack// tip: Run this command in your terminal to install the skill
SKILL.md
name: security-practices description: Security practices including secrets management, input validation, SSRF prevention, and production hardening. Use for security-sensitive code.
security-practices
Quick Start
- All secrets in environment variables (never in config files)
- Validate inputs at system boundaries
- Sanitize error responses (no stack traces in production)
- Use HTTPS for all external connections
Key Principles
- Environment variables for all secrets
- SSRF prevention (block internal IP ranges)
- Development vs Production mode separation
- Rigorous input validation
References
See rules.md for complete conventions.
Repository
eser
Author
eser/stack/.claude/skills/security-practices
83
Stars
4
Forks
Updated5d ago
Added1w ago