security

Analyze and implement security-sensitive code involving authentication, authorization, tokens, sessions, uploads, payment, encryption, secrets, webhooks…

Skill by PAISHU-AI

IndexedMIT★ 1

Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/paishu-ai-security

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Analyze and implement security-sensitive code involving authentication, authorization, tokens, sessions, uploads, payment, encryption, secrets, webhooks, sensitive data, dependency risk, injection, XSS, CSRF, SSRF, SQL injection, and audit logging.

Use cases: backend, data, security, finance

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools: No tools found
Secrets: None asked for
Install scripts: None found

Network hosts it talks to 1

codeload.github.com · found in install command

Files it touches

~/.claude/skills/security

What's inside

Skill name: security
Description: Analyze and implement security-sensitive code involving authentication, authorization, tokens, sessions, uploads, payment, encryption, secrets, webhooks, sensitive data, dependency risk, injection, XSS, CSRF, SSRF, SQL injection, and audit logging.
License: MIT
Instructions: 23 lines in SKILL.md · view on GitHub

Agent Skills spec issues

name: "security" does not match folder "08-security"

Files (1)

SKILL.md

SKILL.md (first lines)

# Security

## Workflow

1. Identify assets, actors, trust boundaries, and attacker-controlled inputs.
2. Validate and normalize input at boundaries.
3. Enforce authentication and authorization close to protected actions.
4. Protect secrets and sensitive data in storage, transit, logs, and errors.
5. Check injection, XSS, CSRF, SSRF, path traversal, upload, and deserialization risks as relevant.
6. Add tests for bypass, malformed input, and authorization boundaries when feasible.

## Hard Rules

- Never output real secrets.
- Never recommend disabling security checks as a durable fix.
- Never concatenate untrusted input into SQL, shell commands, templates, file paths, or URLs without safe APIs and validation.
- Do not log tokens, passwords, private keys, full payment data, or sensitive personal data.

## Output

State threat, mitigation, residual risk, and verification. Keep security claims precise.

From PAISHU-AI/PAI-zong-NB-v5.8, MIT.

Signals

Stars: 1
Forks: 1
Open issues: 0
Last commit (this folder): Jul 18, 2026 (3 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License: MIT
Repository: github.com/PAISHU-AI/PAI-zong-NB-v5.8
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: GitHub github-graphql

More from PAISHU-AI

Cite this page

security skill. Agent Mart. https://agentmart.dev/skills/paishu-ai-security (last updated 2026-10-24)