sammyboi81

Secure Coding Core — Security skill for Claude Code

Security community

Baseline rules for any code you write - OWASP Top 10 mapped to concrete habits.

How to install Secure Coding Core

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-secure-coding-core/SKILL.md

Terminal
mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-secure-coding-core && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/secure-coding-core.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-secure-coding-core/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Secure Coding Core does

name: secure-coding-core description: Baseline rules for any code you write - OWASP Top 10 mapped to concrete habits. tags: core, web, owasp

Read this first for any build. Then load the specific skills for the task (skills_for_task).

Principles

  • Deny by default. Validate input, encode output, least privilege, fail closed, defense in depth.
  • Never trust: user input, headers, cookies, file names, webhooks, third-party API responses, model output, retrieved documents.
  • Prefer boring,

Alternatives in Security

Full documentation available on GitHub

View Source Repository

Related Skills

Owasp Security — Security skill for Claude Code

Owasp Security

OWASP Top 10:2025, ASVS 5.0, and Agentic AI security (2026) with code review checklists, secure patterns, and

Security community
AI OS Self — Security skill for Claude Code

AI OS Self

MaiKS is a microkernel-inspired governance layer that runs inside your project workspace. It adds rules, a pre

Security community
Security Playbook — Security skill for Claude Code

Security Playbook

Security skill pack for AI coding agents — behavioral guardrails, OWASP code/LLM rules, static analysis guidan

Security community
Secure LLM Gateway — Security skill for Claude Code

Secure LLM Gateway

Security-focused gateway in front of an LLM API — auth, prompt-injection defense, output filtering, audit logg

Security community
Perf Audit — Security skill for Claude Code

Perf Audit

Baseline measurements + Top 5 bottlenecks per PERF.md (measurement-only, no edits)

Security community
Agent Assurance — Security skill for Claude Code

Agent Assurance

Declare what your AI agent may do. Verify it on every edit, PR and release — MCP configs, Claude Code permissi

Security community

Related Agents

Laravel Security Auditor — Security agent for Claude Code

Laravel Security Auditor

Expert in Laravel application security, specializing in vulnerability detection, secure coding practices, auth

Security community
Python Security Auditor — Security agent for Claude Code

Python Security Auditor

Production-grade Python security auditor eliminating os.execv() vulnerability, bare exception handlers, and si

Security community
Security Specialist — Security agent for Claude Code

Security Specialist

Expert in application security, OWASP, vulnerability analysis, and secure coding practices

Security community