skills.rest
FelipePepe
FelipePepeCOMMUNITY
Explore all skills by this author →
GitHub

rule-security

Enforce security and configuration standards across a repository.

Updated Jan 25, 2026
Search Tags:#security#authentication#validation#mfa#secrets-management#ssdlc
One-click install
npx skills add https://github.com/FelipePepe/TeamHub --skill rule-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: rule-security
Source: https://github.com/FelipePepe/TeamHub/tree/main/.agents/skills/rule-security
Command: npx skills add https://github.com/FelipePepe/TeamHub --skill rule-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides security and configuration standards (SSDLC) for the repository to prevent insecure defaults, misconfigurations, and exposure of secrets.

Core Features & Use Cases

  • Establishes authentication, environment variable handling, API validation, secrets management, MFA requirements, and secure headers as default practices.
  • Guides the implementation of strict input validation (e.g., runtime schemas) to fail fast on invalid configurations.
  • Defines mandatory security controls (CSP, HTTPS, MFA, and secret-handling rules) to reduce attack surface and improve compliance.

Quick Start

Review authentication, environment variable handling, and API validation against the SSDLC rules to ensure compliant security posture.

Frequently Asked Questions about rule-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What are SSDLC rules for secure software design?▼

SSDLC rules establish mandatory security and configuration standards across a repository to prevent insecure defaults, misconfigurations, and exposure of secrets during software development.

How do I enforce secure environment variable and secrets management handling?▼

Enforce secure secret handling by applying boot-time validation and strict rules that process environment variables without exposing sensitive data, ensuring invalid configurations fail fast at runtime.

How do I implement strict input validation and API security checks?▼

Implement strict API validation using runtime schemas and prepared statements to ensure safe input handling, which reduces the attack surface and improves overall application compliance.

Does this skill guide MFA implementation and HTTP header enforcement?▼

Yes, it defines mandatory security controls including Multi-Factor Authentication (MFA), strict Content Security Policy (CSP), and HTTPS enforcement to guide secure authentication and header implementations.

When do I need boot-time validation for API and configuration security?▼

You need boot-time validation when you want to fail fast on invalid configurations, ensuring that strict runtime schemas and secure environment variable handling are applied before the application starts.

Related Skills

Explore More Legal & Compliance Skills→
ollieb89ollieb89

render-deploy

Generate render.yaml blueprints or MCP commands for Render deployments.

Community
Advanced
damacusdamacus
2

best-practices

Audit web projects for security, compatibility, and quality standards.

Community
Advanced
CenredJunCenredJun

security-auditor

Scan JavaScript, TypeScript, and Python codebases for vulnerabilities and secrets.

Community
Advanced
4tie4tie

environment-secrets

Manage environment variables and secrets without exposing sensitive values.

Community
Intermediate