skills.rest
minusfive
minusfiveCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security

Enforce security best practices for macOS dotfiles projects.

5|Updated Jan 21, 2011
Search Tags:#security#permissions#dotfiles#macos#secrets management#secure defaults
One-click install
npx skills add https://github.com/minusfive/dot --skill security-minusfive
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/minusfive/dot/tree/main/.claude/skills/security
Command: npx skills add https://github.com/minusfive/dot --skill security-minusfive

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides essential guidelines to ensure the security of the macOS dotfiles project, focusing on protecting sensitive information and system integrity.

Core Features & Use Cases

  • Secrets Management: Guidelines on handling API keys, passwords, and other sensitive data.
  • Permissions Control: Best practices for managing file and system permissions.
  • Secure Defaults: Recommendations for configuring network-enabled tools securely.
  • Use Case: When making changes that involve storing credentials or modifying system-level configurations, consult these guidelines to prevent vulnerabilities.

Quick Start

Review the security guidelines before committing any sensitive data.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent secrets from leaking in macOS dotfiles?▼

To prevent secrets from leaking in macOS dotfiles, avoid version control for sensitive information like API keys and passwords. Adhere to least privilege principles and use proper secrets management guidelines to protect credentials.

What are the best practices for managing permissions in a dotfiles project?▼

Best practices for managing permissions in a dotfiles project involve enforcing least privilege and strictly controlling file and system permissions. Following these guidelines prevents vulnerabilities when modifying system-level configurations.

How do I securely configure network-enabled tools in macOS dotfiles?▼

Securely configure network-enabled tools in macOS dotfiles by applying secure defaults and restricting network access. These guidelines help maintain system integrity when establishing external connections.

When do I need to review security guidelines for dotfiles changes?▼

You need to review security guidelines for dotfiles changes when handling credentials, modifying system-level configurations, or establishing external connections. Consulting these guidelines prevents vulnerabilities before committing sensitive data.

Can I store API keys directly in my version controlled dotfiles?▼

No, you should not store API keys or other sensitive data directly in version controlled dotfiles. The guidelines require avoiding version control for sensitive information to maintain a secure configuration.

Does this security approach apply to non-macOS dotfiles projects?▼

This security approach specifically targets macOS dotfiles projects, focusing on scenarios involving credential handling, system modifications, and external connections within the macOS environment to maintain secure defaults.

Related Skills

Explore More Software Engineering Skills→
taloncjonestaloncjones

dotfiles-validation-and-qa

Validate dotfiles configuration and tests on macOS and Linux.

Community
Advanced
benjaminshoemakerbenjaminshoemaker
39

security-scan

Scan codebases for dependency vulnerabilities, risky patterns, and secrets.

Community
Intermediate
gke-labsgke-labs
42

review-security-k8s-agents-firewall

Audit Kubernetes network policies and firewall rules for AI agent sandboxes.

Official
Intermediate
cartridge-ggcartridge-gg
80

pre-commit-check

Run Husky pre-commit hooks for format, lint, and test checks.

Official
Intermediate