forge-security

Block access to secrets and require confirmation for risky commands.

1|Updated Dec 20, 2025
One-click install
npx skills add https://github.com/martimramos/claude-forge --skill forge-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: forge-security
Source: https://github.com/martimramos/claude-forge/tree/main/skills/security
Command: npx skills add https://github.com/martimramos/claude-forge --skill forge-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill enforces security guardrails for Claude Code by preventing access to secrets, credentials, and sensitive files, safeguarding data and reducing risk during development and deployment.

Core Features & Use Cases

  • Blocked Patterns: prevents reading or writing environment secrets and files matching sensitive patterns.
  • Ask First (confirmation): requires explicit user confirmation for network requests and infrastructure commands such as terraform plan/apply, kubectl apply.
  • Guidance & Reference: provides a clear workflow and reference material to help maintain secure coding and operations.

Quick Start

Use the forge-security skill to block access to sensitive data and require confirmation for risky actions in your Claude Code workflow.

Frequently Asked Questions about forge-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I block access to secrets and sensitive files during Claude Code operations?

Security guardrails prevent access to secrets and sensitive files by applying blocked patterns to file I/O, network requests, and infrastructure commands. This requires explicit user confirmation for risky actions like terraform plan or kubectl apply.

Can I require user confirmation for infrastructure commands like terraform apply and kubectl apply?

Yes, you can require user confirmation for infrastructure commands like terraform apply and kubectl apply. The guardrails intercept these network requests and operational changes, prompting explicit approval before execution to safeguard data.

What security patterns should I enforce for data protection in Claude Code workflows?

You should enforce blocked patterns that prevent reading or writing environment secrets and sensitive files. These security patterns apply across file I/O, network requests, and infrastructure commands to guard data flows and operational changes.

Does forge-security work without additional dependencies or external libraries?

forge-security works without additional dependencies, using a references component to provide guidance and reference material for safe handling. It enforces blocked patterns and requires user confirmation for risky actions natively.

When should I use security guardrails for infrastructure commands and network requests?

Use security guardrails when you need to reduce risk during development and deployment by safeguarding data. They are essential when running infrastructure commands or network requests that could expose secrets, credentials, or sensitive files.