Secure Init — Security skill for Claude Code
/secure-init — Zero-Trust Project Security Setup.
How to install Secure Init
Installs to ~/.claude/skills/ddm21-claude-creative-tools-secure-init/SKILL.md
mkdir -p ~/.claude/skills/ddm21-claude-creative-tools-secure-init && curl -fsSL https://raw.githubusercontent.com/ddm21/claude-creative-tools/HEAD/commands/secure-init.md -o ~/.claude/skills/ddm21-claude-creative-tools-secure-init/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Secure Init does
/secure-init — Zero-Trust Project Security Setup
Your job is to set up complete security lockdown for this project by creating or updating `.claude/settings.json` with comprehensive deny rules and scoped allow rules. This is self-contained — no global settings required.
Arguments are optional. When provided they extend and can override the defaults.
Arguments (all optional, natural language)
Arguments are passed as plain natural language after the command. Interpret them using comm
Alternatives in Security
- Security Threat Model — Generate repo-specific threat models identifying trust boundaries 14.6k ★
- Synk Skill Security Scanner — Agent Trust Hub 1.9k ★
- Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Init Profile
First-time developer profile setup for claude-audit-framework
Claude Code Security Setup
A secure Claude Code setup from Trail of Bits that provides opinionated defaults, documentation, and workflows
MCP Approve
Run the Zero-Trust Validation Protocol to audit and approve an MCP package for installation
Secure Plugin Installer
Audit and gate third-party Claude Code plugins / OpenClaw skills before enabling them: capability enumeration,
Engage.Init
Initialize a new security engagement following the Kill Chain workflow
Project Init Skill
A Claude Code skill that runs a 3-round project kickoff interview before writing any code — outputs full archi
Related Agents
Sf Security Engineer
Security Engineer of the Software Factory cell. Use to run SAST/dependency/secret scans, verify zero-trust sec
Security Boss
You need to identify vulnerabilities, audit auth flows, review code for security flaws, or threat-model a syst
Proj Init
Use this agent when bootstrapping a new project workspace during automated setup cycles. Typical triggers incl
