Mdd Security Rules — Security skill for Claude Code
SECURITY RULES MODE — /mdd security-rules.
How to install Mdd Security Rules
Installs to ~/.claude/skills/thedecipherist-mdd-mdd-security-rules/SKILL.md
mkdir -p ~/.claude/skills/thedecipherist-mdd-mdd-security-rules && curl -fsSL https://raw.githubusercontent.com/TheDecipherist/mdd/HEAD/commands/mdd-security-rules.md -o ~/.claude/skills/thedecipherist-mdd-mdd-security-rules/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Mdd Security Rules does
SECURITY RULES MODE — `/mdd security-rules`
Triggered when arguments start with `security-rules`. Also triggered automatically by AUDIT MODE when `$MDD_SECURITY_SCAN` is `true` (set via `securityScan: true` in `.mdd/settings.json`).
This mode scans the project's declared stack for known vulnerabilities using free, locally-available tools, then compares each finding against existing MDD stack rule files. Any vulnerability pattern not already covered by an existing rule becomes a new rule, ap
Alternatives in Security
- Mcp-scan (Invariant Labs) — MCP security scanner with proxy mode for real-time scanning without infrastructure changes 1.9k ★
- Maestro Odyssey — Long-running iterative cycle — one entry, seven modes (debug improve planex review security defensive ui) 530 ★
- Squirrelscan — The website QA tool for your coding agent 272 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Mdd
MDD workflow — Document → Audit → Fix → Verify. Build features or audit existing code using Manual-First Devel
Mingyi Atlas
Harness-driven terminal AI agent for authorized security assessment, with TUI, headless automation, persistent
Candor
Twelve anti-sycophancy work-mode personas for Claude Code - direct, verification-driven, benchmarked. Coding,
Cpv Batch Security Audit
Fan out security-only validation across every plugin in a marketplace, a list of plugins, or a single plugin.
Deep
Execute the current task using DEEP mode for architecture, security, data, infrastructure, public contracts, o
Bulbi
Security-first sandbox for autonomous AI coding agents. Run Claude Code, Codex and other AI CLIs in full-auto
Related Agents
Style Sync
Checks that CSS custom properties defined in src/styles/main.css (like --accent, --bg, --text) are consistentl
Instruction Quality Reviewer
Instruction quality reviewer — assesses skill files, rules, and agent prompts against five quality dimensions.
Bstack Agent
Delegate that works in bstack mode. Use for code-writing delegates and ad-hoc helpers spawned from /bstack-mod