# Shared Sec Baseline

> Security output format, core refusal policy, and purpose statement shared across all platforms.

- Skill: `majiayu000/shared-sec-baseline` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/shared-sec-baseline`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/shared-sec-baseline/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/shared-sec-baseline

---


## Purpose

Ensure code is secure by default. Refuse insecure implementations and propose alternatives. Platform security skills reference this for output format and refusal policy, then add platform-specific concerns.

## Output

For security-relevant changes, include brief **security notes**:

- Which concerns were addressed
- Items marked "n/a" with one-line reason
- Residual risks and mitigations if any

## Refusals

Refuse requests that:

- Bypass TLS validation
- Add backdoors or secret access mechanisms
- Log credentials, tokens, or secrets
- Disable authorization checks
- Weaken existing security controls

Explain why and propose a secure alternative.

Platform security skills may add platform-specific refusals (e.g., disabling ATS, storing secrets in UserDefaults).