security-core

Implement and audit application security across TypeScript, Python, and Rust.

Updated Jan 22, 2026
One-click install
npx skills add https://github.com/aaronbassett/claude-bell --skill security-core
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-core
Source: https://github.com/aaronbassett/claude-bell/tree/main/.claude/skills/security-core
Command: npx skills add https://github.com/aaronbassett/claude-bell --skill security-core

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires jq, rg, npm, pip-audit, cargo-audit, openssl, git, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill provides comprehensive guidance for implementing and auditing application security across TypeScript, Python, and Rust, helping teams address authentication, authorization, and infrastructure hardening.

Core Features & Use Cases

  • Authentication guidance covering JWT, OAuth2, sessions, and device flows across TS, Python, and Rust.
  • Authorization patterns including RBAC, ABAC, and Row-Level Security (RLS) with multi-tenant options.
  • Security auditing and governance: code reviews, vulnerability checks, and OWASP Top 10 mapping.
  • Infrastructure hardening: security headers, CORS, CSP, rate limiting, and secrets management.
  • Secure coding practices and template assets to accelerate secure app delivery.

Quick Start

Use security-core to plan and implement a secure baseline: review references/authentication.md, references/authorization.md, and apply templates from assets/configs, then run scripts/audit_security.sh for validation.

Frequently Asked Questions about security-core

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure authentication and authorization across TypeScript, Python, and Rust?

Secure authentication and authorization across TypeScript, Python, and Rust is implemented using enforced JWT/OAuth2 patterns alongside RBAC, ABAC, and Row-Level Security. The skill provides comprehensive guidance and templates to establish a secure baseline for web, API, and CLI applications.

What is the best way to audit my codebase for OWASP Top 10 vulnerabilities?

Auditing your codebase for OWASP Top 10 vulnerabilities is best handled by running the included validation scripts. The skill maps security governance checks and vulnerability scans directly against OWASP standards to identify and remediate risks across your applications.

How do I configure CSP, HSTS, and rate limiting for API security hardening?

Configuring CSP, HSTS, and rate limiting for API security hardening is achieved by applying the provided template assets. These infrastructure hardening configurations ensure robust security headers and traffic controls are correctly implemented for your web services.

Does this security guidance support multi-tenant Row-Level Security patterns?

Yes, this security guidance supports multi-tenant Row-Level Security (RLS) patterns. It delivers specific authorization mechanisms including RBAC, ABAC, and RLS to enforce strict data access controls across your TypeScript, Python, and Rust environments.

Do I need specific CLI tools installed to run security audits and checks?

Yes, you need specific CLI tools installed to run the security audits and checks effectively. The skill relies on dependencies including jq, rg, npm, pip-audit, cargo-audit, openssl, and git to perform comprehensive code reviews and vulnerability validation.