Skill File Security

This is a CLI tool that drops 29 security instruction files into your project's `.skills/security/` directory so AI coding assistants can spot vulnerabilities without you leaving your IDE. It covers OWASP Top 10, CWE Top 25, and ASVS Level 3 across categories like secrets management, SQL injection, RLS policies, JWT handling, and Docker hardening. You run `npx @netxeo/security-skill`, answer five questions about your stack, and it configures Claude, Cursor, Copilot, Windsurf, and Cline to understand `/security-scan`, `/security-audit`, and `/security-fix` commands. The value proposition is straightforward: instead of context-switching to separate security tools, your AI assistant learns to catch hardcoded API keys, missing rate limits, and disabled RLS policies during normal coding. It maintains a score tracker in `memory-security.md` so you can prove improvement over time.

Install to Claude Code

npx -y skills add aradotso/security-skills --skill skill-file-security --agent claude-code