Mdd Security Rules — Security skill for Claude Code
SECURITY RULES MODE — /mdd security-rules.
How to install Mdd Security Rules
Installs to ~/.claude/skills/thedecipherist-mdd-mdd-security-rules/SKILL.md
mkdir -p ~/.claude/skills/thedecipherist-mdd-mdd-security-rules && curl -fsSL https://raw.githubusercontent.com/TheDecipherist/mdd/HEAD/commands/mdd-security-rules.md -o ~/.claude/skills/thedecipherist-mdd-mdd-security-rules/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Mdd Security Rules does
SECURITY RULES MODE — `/mdd security-rules`
Triggered when arguments start with `security-rules`. Also triggered automatically by AUDIT MODE when `$MDD_SECURITY_SCAN` is `true` (set via `securityScan: true` in `.mdd/settings.json`).
This mode scans the project's declared stack for known vulnerabilities using free, locally-available tools, then compares each finding against existing MDD stack rule files. Any vulnerability pattern not already covered by an existing rule becomes a new rule, ap
Alternatives in Security
- FastAPI Review — Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu 243.5k ★
- Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
- Google Workspace Alert Center — Manage security alerts 21.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Mdd
MDD workflow — Document → Audit → Fix → Verify. Build features or audit existing code using Manual-First Devel
Mcp-scan (Invariant Labs)
MCP security scanner with proxy mode for real-time scanning without infrastructure changes.
Maestro Odyssey
Long-running iterative cycle — one entry, seven modes (debug improve planex review security defensive ui). Sha
Cpv Batch Security Audit
Fan out security-only validation across every plugin in a marketplace, a list of plugins, or a single plugin.
Deep
Execute the current task using DEEP mode for architecture, security, data, infrastructure, public contracts, o
Unifly Audit
Security audit of UniFi configuration. Checks for open WiFi, permissive firewall rules, and misconfigurations
Related Agents
Instruction Quality Reviewer
Instruction quality reviewer — assesses skill files, rules, and agent prompts against five quality dimensions.
Crypto Attacker
Cryptography and TLS security specialist. Handles TLS configuration auditing, JWT algorithm confusion, padding
Prevent XSS Attacks
add_header X-Content-Type-Options "nosniff"; add_header X-Frame-Options "DENY"; add_header X-XSS-Protection "1