Security checklist
- No secrets in code, config, or test fixtures.
- Every new endpoint checks authorization, not just authentication.
- User input is validated at the boundary, not deep in the stack.
- Errors never leak internal details to the client.
Sec Checklist
Security checklist to run before merging any change that touches auth, secrets, or user data
SylphAI-Inc
Updated Sec Checklist by SylphAI-Inc · 87bf0ba
npx skillmds@latest add sylphai-inc/sec-checklist File contents
---name: sec-checklistdescription: Security checklist to run before merging any change that touches auth, secrets, or user data---# Security checklist1. No secrets in code, config, or test fixtures.2. Every new endpoint checks authorization, not just authentication.3. User input is validated at the boundary, not deep in the stack.4. Errors never leak internal details to the client.
SylphAI-Inc/atskills/tree/main/examples/team-demo/.atskills/sec-checklist commit 87bf0ba0ee
Frequently asked questions
Run npx skillmds@latest add sylphai-inc/sec-checklist in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Security checklist to run before merging any change that touches auth, secrets, or user data It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
SylphAI-Inc (@sylphai-inc) published this skill. Their other Agent Skills are listed on their SkillMD profile.