secure-code-guardian

An agent skill by Jeffallan, from Jeffallan/claude-skills. Tags: api, compliance, debugging, security, web.

What it does

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For pre-built OAuth/SSO integrations or standalone security audits, consider a more specialized skill.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add Jeffallan/claude-skills --skill secure-code-guardian

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/Jeffallan/claude-skills
cp -r claude-skills/skills/secure-code-guardian ~/.claude/skills/secure-code-guardian

Safety box score

Not rated yet. A safety box score grades what a skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. Anyone can request one from this page; it is saved for everyone. How the score works.

Source

Repository

Jeffallan/claude-skills (all skills from this repository)

Path

skills/secure-code-guardian/SKILL.md

Branch

main

Updated

2026-09-19

Related skills

• java-architect — x, microservices, or reactive programming.
• aws-auth — Adds user authentication to web and mobile apps with Amazon Cognito (user pools and identity pools) and the AWS Amplify client auth libraries.
• django-expert — Use when building Django web applications or REST APIs with Django REST Framework. py, or any Django project file.
• django-storages-s3 — Use when configuring Django to store static and media files on AWS S3 with django-storages. py.
• dotnet-core-expert — NET 8 applications with minimal APIs, clean architecture, or cloud-native microservices.
• fullstack-guardian — Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level.