aradotso avatar

Skill File Security

This is a CLI tool that drops 29 security instruction files into your project's `.skills/security/` directory so AI coding assistants can spot vulnerabilities without you leaving your IDE. It covers OWASP Top 10, CWE Top 25, and ASVS Level 3 across categories like secrets management, SQL injection, RLS policies, JWT handling, and Docker hardening. You run `npx @netxeo/security-skill`, answer five questions about your stack, and it configures Claude, Cursor, Copilot, Windsurf, and Cline to understand `/security-scan`, `/security-audit`, and `/security-fix` commands. The value proposition is straightforward: instead of context-switching to separate security tools, your AI assistant learns to catch hardcoded API keys, missing rate limits, and disabled RLS policies during normal coding. It maintains a score tracker in `memory-security.md` so you can prove improvement over time.

skills.sh installs
681
GitHub stars
6
last updated
Jul 14, 2026

Install

$ npx -y skills add aradotso/security-skills --skill skill-file-security --agent claude-code

Installs into .claude/skills of the current project.

Files

skill-file-security

Skill by ara.so — Security Skills collection.

skill-file-security installs 29 battle-tested security instruction files into your project that teach AI coding assistants to identify and fix vulnerabilities across OWASP Top 10, CWE Top 25, ASVS Level 3, and more — without leaving your IDE.

What This Does

skill-file-security is a CLI tool that:

  • Installs security knowledge files to .skills/security/ in your project
  • Auto-configures all major AI coding assistants (Claude, Cursor, Copilot, Windsurf, Cline, etc.)
  • Creates memory-security.md to track your security score over time
  • Hardens .gitignore with 6 security-focused entries
  • Provides 6 slash commands: /security-scan, /security-audit, /security-fix, /security-status, /security-history, /security-incident

The AI assistant reads these instruction files and applies 29 security categories to YOUR specific stack (Next.js, Django, Laravel, Express, Docker, Supabase, Firebase, etc.).

Installation

Interactive Mode (Recommended)

npx @netxeo/security-skill

Sponsors

Details

Repository
github.com/aradotso/security-skills
Category
Security
First seen
Jul 14, 2026

More from aradotso/security-skills

All 58

Recommended

More Security
1aradotso avatarsparkfinderoven-security-compliance-skillsaradotso/security-skillssparkfinderoven security compliance skills661skills.sh installs
2nickcrew avatarowasp-top-10nickcrew/claude-ctx-pluginowasp top 10655skills.sh installs
3aradotso avatarsecurity-compliance-skills-suite-claudearadotso/security-skillssecurity compliance skills suite claude652skills.sh installs
4aradotso avatarpentestify-security-report-generatoraradotso/security-skillspentestify security report generator639skills.sh installs
5aradotso avatarsparkfinderoven-r01-security-compliance-skillsaradotso/security-skillssparkfinderoven r01 security compliance skills630skills.sh installs
6aradotso avatarsparkfinderoven-claude-security-compliance-suitearadotso/security-skillssparkfinderoven claude security compliance suite625skills.sh installs