Enforce secure coding governance with SAST gates and input validation.
npx skills add https://github.com/tale-project/tale --skill security-tale-project
Please help me install this Agent Skill. Skill: security Source: https://github.com/tale-project/tale/tree/main/.claude/skills/security Command: npx skills add https://github.com/tale-project/tale --skill security-tale-project
Enforces secure-coding practices across Tale by applying the OWASP boundary checklist, gating changes with a blocking SAST process, validating inputs at boundaries with strong schemas, and securing secret handling while guarding the sandbox egress.
Run the built-in security-review skill to perform an adversarial pass over a branch and verify security posture.
High-intent search queries and answers about installing and using this skill.
Secure coding practices are enforced by applying the OWASP boundary checklist to request handlers, ensuring boundary input validation, safe access control, and SSRF protections across critical surfaces.
The SAST gate catches vulnerabilities by acting as a blocking mechanism in the CI pipeline, preventing code changes from deploying until static analysis verifies the security posture of the branch.
The best way to validate inputs is using Zod-based strong schemas at trust boundaries, which standardizes data validation for request handlers and file system interactions throughout the codebase.
Secret management and sandbox egress controls are handled through environment-based configurations and sandbox firewall rules, standardizing hardening guidance and securing secret handling across services.
Yes, you can run the built-in security-review skill to perform an adversarial pass over a branch, verifying the security posture and checking for vulnerabilities before merging changes.
Quanby-IT-SolutionsApply OWASP-aligned security patterns across monorepo backend and frontend pipelines.
tbeackOrchestrate security review findings into diffs, regression tests, and PRs.
samuerioExecute isolated code and file operations in E2B sandboxes.
eliottbusinessAutomate pre-commit code review with static analysis and security scanning.
