obra

Defense In Depth — Security skill for Claude Code

Security community intermediate

Implement multi-layered testing and security best practices.

How to install Defense In Depth

This entry records only its repository, not the path inside it, so there is no exact command to give. Open obra/superpowers and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Defense In Depth does

Implement multi-layered testing and security best practices.

One of 5 entries listed from obra/superpowers. The repository README describes the whole collection, not this skill — read it on GitHub.

Alternatives in Security

Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
T3mp3st — autonomous red teaming platform; multi-agent offensive-security meta-harness 5.7k ★
Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★

Repository README

This is the README for obra/superpowers, shared by 4 entries in this directory. It describes the repository, not this entry specifically.

Superpowers

Superpowers is a complete software development workflow for your coding agents, built on top of a set of composable "skills" and some initial instructions that make sure your agent uses them.

How it works

It starts from the moment you fire up your coding agent. As soon as it sees that you're building something, it *doesn't* just jump into trying to write code. Instead, it steps back and asks you what you're really trying to do.

Once it's teased a spec out of the conversation, it shows it to you in chunks short enough to actually read and digest.

After you've signed off on the design, your agent puts together an implementation plan that's clear enough for an enthusiastic junior engineer with poor taste, no judgement, no project context, and an aversion to testing to follow. It emphasizes true red/green TDD, YAGNI (You Aren't Gonna Need It), and DRY.

Next up, once you say "go", it launches a *subagent-driven-development* process, having agents work through each engineering task, inspecting and reviewing their work, and continuing forward. It's not uncommon for Claude to be able to work autonomously for a couple hours at a time without deviating from the plan you put together.

There's a bunch more to it, but that's the core of the system. And because the skills trigger automatically, you don't need to do anything special. Your coding agent just has Superpowers.

Sponsorship

If Superpowers has helped you do stuff that makes money and you are so inclined, I'd greatly appreciate it if you'd consider [sponsoring my opensource work](https://github.com/sponsors/obra).

Thanks!