security-standards

Enforce security standards across Lambda, React, and Astro projects.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/MDLDev-site/mdl-brand-website --skill security-standards-mdldev-site
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-standards
Source: https://github.com/MDLDev-site/mdl-brand-website/tree/main/.claude/skills/security-standards
Command: npx skills add https://github.com/MDLDev-site/mdl-brand-website --skill security-standards-mdldev-site

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

MDL teams lack a single, comprehensive security baseline, leading to inconsistent practices across Lambda backends, React frontends, and Astro brand sites.

Core Features & Use Cases

  • Centralized security principles covering secrets management, input validation, XSS/CSRF prevention, authentication patterns, payment security, and incident response.
  • Enforce secure coding practices, pre-commit security checklists, and incident response planning across projects.
  • Use case: apply these standards during security reviews or auth work to ensure sensitive data is protected.

Quick Start

Evaluate a new codebase against the MDL security standards and implement the prescribed controls.

Frequently Asked Questions about security-standards

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What security standards should I enforce for secrets management and input validation across my projects?

Security standards for secrets management and input validation require centralizing protective principles, enforcing pre-commit checklists, and applying consistent authentication patterns across Lambda backends, React frontends, and Astro brand sites to ensure sensitive data remains protected and auditable.

How do I implement secure authentication patterns and XSS prevention for React frontends?

Implement secure authentication patterns and XSS prevention for React frontends by applying centralized security principles that specify strict input validation, documentation, and secure logging practices to maintain consistent team-wide protection against cross-site scripting vulnerabilities.

Does this security baseline apply to Lambda backends and Astro brand sites?

Yes, this security baseline applies directly to Lambda backends and Astro brand sites, enforcing consistent secrets management, input validation, and incident-response guidance across all MDL projects to eliminate fragmented and inconsistent team practices.

What's the best way to prepare an incident response plan for sensitive data handling?

The best way to prepare an incident response plan for sensitive data handling is to apply centralized security standards that specify documentation, secure logging practices, and incident-response guidance to ensure consistent, auditable security during security reviews.

How do I evaluate a new codebase against team-wide security controls during a security review?

Evaluate a new codebase against team-wide security controls by checking its implementation of secrets management, input validation, authentication patterns, and pre-commit security checklists to identify gaps in sensitive data protection and secure coding practices.

Why do I need pre-commit security checks for payment security and CSRF prevention?

Pre-commit security checks for payment security and CSRF prevention are needed to enforce secure coding practices before code is merged, ensuring sensitive data controls and protective principles are consistently applied and auditable across your projects.