discover-security

Discover security skills for authentication, authorization, input validation, headers, vulnerability assessment, and secrets management.

126|7|Updated Oct 18, 2025
One-click install
npx skills add https://github.com/rand/cc-polymath --skill discover-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: discover-security
Source: https://github.com/rand/cc-polymath/tree/main/skills/discover-security
Command: npx skills add https://github.com/rand/cc-polymath --skill discover-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This gateway helps you locate and apply key security skills for authentication, input validation, headers, vulnerability assessments, and secrets management, reducing risk in development and operations.

Core Features & Use Cases

  • authentication patterns and implementations
  • authorization and access control
  • input-validation and sanitization
  • security-headers (CSP, HSTS, CORS)
  • vulnerability-assessment and testing
  • secrets-management and credential handling

Quick Start

cat ~/.claude/skills/security/authentication.md cat ~/.claude/skills/security/authorization.md cat ~/.claude/skills/security/input-validation.md cat ~/.claude/skills/security/security-headers.md cat ~/.claude/skills/security/vulnerability-assessment.md cat ~/.claude/skills/security/secrets-management.md

Frequently Asked Questions about discover-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement authentication and authorization in my application?

Authentication verifies user identity through credentials, while authorization controls what authenticated users can access. This Skill surfaces patterns and implementations for both, helping you establish secure identity and access control layers in your application.

What's the best way to validate and sanitize user input?

Input validation and sanitization prevent injection attacks and malformed data from reaching your application logic. This Skill provides guidance on sanitization techniques and validation strategies across common attack vectors.

How do I secure HTTP headers and prevent common web vulnerabilities?

Security headers like CSP, HSTS, and CORS restrict browser behavior to prevent XSS, clickjacking, and other attacks. This Skill guides you through configuring these headers and addressing OWASP-related hardening scenarios.

How do I assess vulnerabilities and manage secrets in my codebase?

Vulnerability assessment identifies security weaknesses, while secrets management protects credentials and API keys. This Skill helps you discover and apply practices for both vulnerability testing and secure credential handling.

Can I use this for OWASP compliance and security hardening?

Yes. This Skill automatically activates for OWASP-related hardening tasks, covering authentication, authorization, input validation, security headers, vulnerability assessment, and secrets management workflows.