prodsec-skills
Secure coding, fuzzing, and security review guidance for code
All Skills in This Repository (128)
Pure Emerald Level Indicators
RedHatProductSecurityprotected-resource-metadata
Implement or review OAuth 2.0 Protected Resource Metadata in MCP servers.
RedHatProductSecurityaddress-sanitizer
Detect memory safety violations in C/C++ applications during fuzz testing.
RedHatProductSecurityagent-identity
Guide AI agent identity implementation with SPIFFE IDs and service accounts.
RedHatProductSecuritymodel-registry-secure-storage
Enforce authentication, authorization, encryption, and auditing for model registry storage.
RedHatProductSecurityhardening-remote
Secure remote MCP servers with TLS, network segmentation, and certificate verification.
RedHatProductSecurityreact-security
Identify XSS vulnerabilities and unsafe HTML or URL handling in React applications.
RedHatProductSecurityno-credential-forwarding
Enforce separate non-user credentials for downstream API access in MCP servers.
RedHatProductSecurityrbac
Map token claims to internal roles for MCP server authorization.
RedHatProductSecurityharness-writing
Generate fuzzing harness templates for C++, Rust, and other languages.
RedHatProductSecurityhealth-probes
Configure Kubernetes liveness, readiness, and startup probes with lifecycle hooks.
RedHatProductSecurityinternal-application-routing
Route internal application requests through a designated API gateway.
RedHatProductSecurityroots-support
Validate MCP servers enforce declared filesystem root boundaries.
Frequently Asked Questions
FAQPage SchemaHow to install prodsec-skills?▼
Run `npx skills add RedHatProductSecurity/prodsec-skills --all -g -y` in your terminal to install all security skills globally.
What does prodsec-skills do?▼
It gives your coding assistant 130+ security guidance files covering secure development, fuzzing, static analysis, and audit workflows, so security best practices are applied as code is written.
Does prodsec-skills work with Claude Code and Cursor?▼
Yes. All skills are tool-agnostic markdown files that work in any assistant that can read files, including Claude Code, Cursor, and Copilot.
Can prodsec-skills help with fuzzing and static analysis?▼
Yes. It includes detailed skills for libFuzzer, AFL++, cargo-fuzz, Semgrep, and CodeQL, covering harness writing, corpus management, and scan workflows.
Do I need security expertise to use prodsec-skills?▼
No. Each skill contains step-by-step checklists and examples, so the agent applies expert-level security guidance from plain-English requests.
Related Repositories in Software Engineering
View All in Software Engineering→
openclawopenclaw
Run a personal AI assistant across your devices and chat apps
obrasuperpowers
Gives coding agents a disciplined workflow from idea to merged code
facebookreact
AI agent skills for building, testing, and porting React core