
Skill File Security
This is a CLI tool that drops 29 security instruction files into your project's `.skills/security/` directory so AI coding assistants can spot vulnerabilities without you leaving your IDE. It covers OWASP Top 10, CWE Top 25, and ASVS Level 3 across categories like secrets management, SQL injection, RLS policies, JWT handling, and Docker hardening. You run `npx @netxeo/security-skill`, answer five questions about your stack, and it configures Claude, Cursor, Copilot, Windsurf, and Cline to understand `/security-scan`, `/security-audit`, and `/security-fix` commands. The value proposition is straightforward: instead of context-switching to separate security tools, your AI assistant learns to catch hardcoded API keys, missing rate limits, and disabled RLS policies during normal coding. It maintains a score tracker in `memory-security.md` so you can prove improvement over time.
- skills.sh installs
- 681
- GitHub stars
- 6
- last updated
- Jul 14, 2026
Install
$ npx -y skills add aradotso/security-skills --skill skill-file-security --agent claude-codeInstalls into .claude/skills of the current project.
Files
skill-file-security
Skill by ara.so — Security Skills collection.
skill-file-security installs 29 battle-tested security instruction files into your project that teach AI coding assistants to identify and fix vulnerabilities across OWASP Top 10, CWE Top 25, ASVS Level 3, and more — without leaving your IDE.
What This Does
skill-file-security is a CLI tool that:
- Installs security knowledge files to
.skills/security/in your project - Auto-configures all major AI coding assistants (Claude, Cursor, Copilot, Windsurf, Cline, etc.)
- Creates
memory-security.mdto track your security score over time - Hardens
.gitignorewith 6 security-focused entries - Provides 6 slash commands:
/security-scan,/security-audit,/security-fix,/security-status,/security-history,/security-incident
The AI assistant reads these instruction files and applies 29 security categories to YOUR specific stack (Next.js, Django, Laravel, Express, Docker, Supabase, Firebase, etc.).
Installation
Interactive Mode (Recommended)
npx @netxeo/security-skill
Sponsors
Details
- Repository
- github.com/aradotso/security-skills
- Category
- Security
- First seen
- Jul 14, 2026
More from aradotso/security-skills
All 58- Bitdefender Malware Investigation677
- Zen Ai Pentest Framework676
- Edgesecurityaccess Wireguard Vpn670
- Sparkfinderoven Security Compliance Skills661
- Securityclaw Autonomous Soc Agent659
- Security Compliance Skills Suite Claude652
- Pentestify Security Report Generator639
- Awesome Claude Code Security Compliance Suite633
- Sparkfinderoven R01 Security Compliance Skills630
- Sparkfinderoven Claude Security Compliance Suite625
- S800 Vehicle Network Security Testing623
- Sparkfinderoven Security Compliance Suite622
- Esaa Security Audit617
- Foundry Security Spec586
- Anthropic Cybersecurity Skills1.3K
- Pentest Ai Agents1.1K
- Pentest Agents Bug Bounty Framework1K
- Openosint Ai Osint Framework992
- Vibe Security Skill976
- Openclaw Security Hardening971
- Malware Detection Awareness960
- Slowmist Agent Security Framework955
- Autopentestx Automated Pentesting950
- Avast Premium Security Analysis947