Openwebf Security Remote Content

Review security risks and mitigations for remote WebF content (untrusted bundles, URL allowlists, HTTPS, trust boundaries, clickjacking). Use when the user mentions untrusted remote bundles, bundle URL validation/allowlists, or remote updates risk.

majiayu000 17343a9 2 files · 1.4 KB Updated 567 repo stars

File contents

OpenWebF Security: Remote Content & Trust Boundaries

Instructions

  1. Identify trust boundaries:
    • remote bundle URLs
    • user-generated content
    • bridge/native plugins
  2. Review how URLs are constructed and validated (allowlists, HTTPS, pinning/versioning).
  3. Use MCP docs (“Security”, “Store Guidelines”) as the baseline for recommendations.
  4. Provide remediation steps ordered by severity; do not modify files by default.

If the user is primarily asking about store policy/compliance for remote updates, prefer openwebf-security-store-guidelines.

More:

  • reference.md
  • doc-queries.md
  • examples.md

majiayu000/claude-skill-registry-data/tree/main/data/openwebf-security commit 17343a914b

Frequently asked questions

npx skillmds add majiayu000/openwebf-security-remote-content