# Web Security Standards > Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions Use when this capability is needed. - Skill: `tomevault-io/web-security-standards` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/web-security-standards` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/web-security-standards/raw - Safety review: pending (external: skill-scanner PASS, skillspector PASS) - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: AI & ML - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/web-security-standards --- # Web Security Standards Skill Domain security knowledge for WebFetch permission management including trusted domains, security red flags, and domain research methodology. ## What This Skill Provides - **Trusted domain list** - Major domains categorized by purpose - **Security assessment patterns** - Red flags and risk indicators - **Domain research methodology** - How to evaluate new domains ## When to Activate Activate when: - Managing WebFetch permissions - Evaluating domain trustworthiness - Researching new domains for approval ## Standards Read: standards/trusted-domains.md Read: standards/domain-security-assessment.md --- > Converted and distributed by [TomeVault](https://tomevault.io/claim/cuioss) — claim your Tome and manage your conversions.