a9ff10d511
- Add 9 agent skills (cc-agent-*) - Add 10 command skills (cc-cmd-*) - Add 8 skill files (cc-skill-*) - Add 8 rule skills (cc-rule-*) - Update README.md skill count from 225 to 260 - Add new skills to Full Skill Registry - Add credit to affaan-m in Credits section - Regenerate skills_index.json Source: https://github.com/affaan-m/everything-claude-code Author attribution: affaan-m, version 1.0
44 lines
982 B
Markdown
44 lines
982 B
Markdown
---
|
|
name: cc-rule-security
|
|
description: Security Guidelines
|
|
author: affaan-m
|
|
version: "1.0"
|
|
---
|
|
|
|
# Security Guidelines
|
|
|
|
## Mandatory Security Checks
|
|
|
|
Before ANY commit:
|
|
- [ ] No hardcoded secrets (API keys, passwords, tokens)
|
|
- [ ] All user inputs validated
|
|
- [ ] SQL injection prevention (parameterized queries)
|
|
- [ ] XSS prevention (sanitized HTML)
|
|
- [ ] CSRF protection enabled
|
|
- [ ] Authentication/authorization verified
|
|
- [ ] Rate limiting on all endpoints
|
|
- [ ] Error messages don't leak sensitive data
|
|
|
|
## Secret Management
|
|
|
|
```typescript
|
|
// NEVER: Hardcoded secrets
|
|
const apiKey = "sk-proj-xxxxx"
|
|
|
|
// ALWAYS: Environment variables
|
|
const apiKey = process.env.OPENAI_API_KEY
|
|
|
|
if (!apiKey) {
|
|
throw new Error('OPENAI_API_KEY not configured')
|
|
}
|
|
```
|
|
|
|
## Security Response Protocol
|
|
|
|
If security issue found:
|
|
1. STOP immediately
|
|
2. Use **security-reviewer** agent
|
|
3. Fix CRITICAL issues before continuing
|
|
4. Rotate any exposed secrets
|
|
5. Review entire codebase for similar issues
|