Summary
This is a security linter that jumps in whenever you're writing Drupal forms, controllers, or anything touching user input. It catches the classics like SQL injection from string concatenation, XSS from raw markup rendering, and missing access checks on entity queries. The pattern tables are genuinely useful, showing vulnerable code next to the safe version so you don't have to guess. It's opinionated about things like accessCheck(FALSE) and will warn you immediately. Honestly, this should probably be active on every Drupal project because these vulnerabilities still show up in contrib modules all the time. The checklist format makes it easy to scan during reviews.
Install to Claude Code
npx -y skills add madsnorgaard/agent-resources --skill drupal-security --agent claude-codeInstalls into .claude/skills of the current project.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Files
SKILL.md
Select a file.
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
