# Adaptive Enforcement Lab Claude Skills Secure

> Secure

- Skill: `tomevault-io/adaptive-enforcement-lab-claude-skills-secure` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/adaptive-enforcement-lab-claude-skills-secure`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/adaptive-enforcement-lab-claude-skills-secure/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/adaptive-enforcement-lab-claude-skills-secure

---


# Secure

## When to Use This Skill

This section covers the **tools and practices** for discovering and remediating security issues in code, dependencies, containers, and supply chains.


## Implementation

1. **Start with GitHub Apps**: Replace PATs with secure, auditable authentication
2. **Add vulnerability scanning**: Catch known CVEs before they deploy
3. **Generate SBOMs**: Document your supply chain for compliance
4. **Run Scorecard**: Measure and improve security posture
5. **Layer on enforcement**: Make findings actionable with Enforce patterns


## Comparison

Understanding the distinction:

- **Secure** (this section): Find and fix security issues
  - Vulnerability scanners that *identify* CVEs
  - SBOM generators that *document* dependencies
  - Security tools that *discover* weaknesses
  - GitHub Apps that *provide* secure authentication

- **Enforce** ([see Enforce](../enforce/index.md)): Make security mandatory through automation
  - Branch protection that *requires* reviews
  - Pre-commit hooks that *block* violations
  - Status checks that *prevent* merges
  - Policy-as-code that *enforces* runtime compliance

**Litmus test**: Can this be bypassed?

- If **no** → It's a Secure tool (finding/fixing)
- If **yes** → It belongs in Enforce (making mandatory)


## Examples

See [examples.md](examples.md) for code examples.


## Related Patterns

- Enforce
- Build
- Patterns

## References

- [Source Documentation](https://adaptive-enforcement-lab.com/secure/index.md/)
- [AEL Secure](https://adaptive-enforcement-lab.com/secure/)

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/adaptive-enforcement-lab) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-15 -->