secure-by-default

What problem does it solve?

This Skill ensures security guardrails are built into software by enforcing input validation, least-privilege access, and redaction of secrets by default, reducing risk from insecure coding practices.

Core Features & Use Cases

• Automated input validation across boundaries (HTTP requests, API payloads, file uploads) to prevent malformed data.
• Enforced least-privilege access for services and components, minimizing blast radius.
• Secrets redaction and safe-logging to prevent leakage of credentials or tokens.
• Use Case: Integrate these guardrails into a new API endpoint to ensure only well-formed requests are processed and secrets are never logged.

Quick Start

Configure your project to validate external input, apply least-privilege, and redact secrets by default in all critical paths.