harperaa avatar

Security Architecture Overview

This gives Claude context on enterprise security patterns baked into the Secure Vibe Coding OS starter, a Next.js 15 SaaS template that treats security as architecture rather than afterthought. Worth using when you're spinning up a new SaaS project and don't want to retrofit auth, OWASP controls, and secure coding patterns later. The skill references a 90/100 OWASP score and zero vulnerabilities, which is notable given that AI-generated code apparently chooses insecure patterns 45% of the time. If you've ever inherited a project where security was bolted on feature by feature, you'll appreciate having these guardrails from commit one.

skills.sh installs
200
GitHub stars
18
last updated
Aug 21, 2026

Install

$ npx -y skills add harperaa/secure-claude-skills --skill security-architecture-overview --agent claude-code

Installs into .claude/skills of the current project.

Files

Security Architecture Overview

Project Security Profile

Project: Secure Vibe Coding OS Version: 1.0 Next.js Version: 15.5.4 Security Audit Status: 0 vulnerabilities OWASP Score: 90/100 (Top 10% of Next.js applications)

What This Project Is

Secure Vibe Coding OS is a production-ready SaaS starter template built with security as a first-class concern, not an afterthought. Unlike typical Next.js starters that provide basic authentication and hope you figure out the rest, this starter embeds enterprise-grade security controls from day one.

Why This Architecture Exists

According to Veracode's 2024 State of Software Security Report, AI-generated code picks insecure patterns 45% of the time. Standard SaaS starters compound this problem by providing minimal security guidance. Developers then prompt AI to build features on an insecure foundation, and each new feature becomes a potential vulnerability.

Sponsors

Details

Repository
github.com/harperaa/secure-claude-skills
Categories
Security, Code Review & Quality
First seen
Jun 3, 2026

More from harperaa/secure-claude-skills

All 12

Recommended

More Security
1cinience avataralicloud-security-content-moderation-green-testcinience/alicloud-skillsSmoke test for alicloud-security-content-moderation-green. Validate minimal authentication, API reachability, and one read-only query path.160skills.sh installs
2cinience avataralicloud-security-id-verification-cloudauth-testcinience/alicloud-skillsSmoke test for alicloud-security-id-verification-cloudauth. Validate minimal authentication, API reachability, and one read-only query path.156skills.sh installs
3hypnguyen1209 avatarai-securityhypnguyen1209/offensive-claudeAI/ML security assessment — prompt injection, jailbreak detection, RAG poisoning, model extraction, adversarial examples, supply chain risks in ML pipelines0skills.sh installs
4hypnguyen1209 avatarvulnerability-analysishypnguyen1209/offensive-claudeExpert-level source code security auditing — taint analysis, memory safety, injection classes, auth flaws, crypto weaknesses, concurrency bugs, supply chain ris0skills.sh installs
5google avatargoogle-cloud-waf-securitygoogle/skillsGenerates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework15.7Kskills.sh installs
6sickn33 avatarapi-security-best-practicessickn33/antigravity-awesome-skillsapi security best practices7.9Kskills.sh installs