security

Name: security
Availability: InStock
Author: Tale

Enforce secure coding governance with SAST gates and input validation.

20|5|Updated Nov 30, 2025

Search Tags:#OWASP #security #validation #secrets #sandbox #SAST #secure-coding

Ready to run

npx skills add https://github.com/tale-project/tale --skill security-tale-project

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/tale-project/tale/tree/main/.claude/skills/security
Command: npx skills add https://github.com/tale-project/tale --skill security-tale-project

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Enforces secure-coding practices across Tale by applying the OWASP boundary checklist, gating changes with a blocking SAST process, validating inputs at boundaries with strong schemas, and securing secret handling while guarding the sandbox egress.

Core Features & Use Cases

Enforces boundary input validation and safe access control in request handlers and critical surfaces.
Provides a gating mechanism via the SAST pipeline to catch vulnerabilities before deployment.
Standardizes secret management, sandbox egress controls, and hardening guidance across services.

Quick Start

Run the built-in security-review skill to perform an adversarial pass over a branch and verify security posture.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce secure coding practices and OWASP boundary checks in request handlers?▼

Secure coding practices are enforced by applying the OWASP boundary checklist to request handlers, ensuring boundary input validation, safe access control, and SSRF protections across critical surfaces.

How does the SAST gate catch vulnerabilities before deployment?▼

The SAST gate catches vulnerabilities by acting as a blocking mechanism in the CI pipeline, preventing code changes from deploying until static analysis verifies the security posture of the branch.

What is the best way to validate inputs at boundaries using Zod schemas?▼

The best way to validate inputs is using Zod-based strong schemas at trust boundaries, which standardizes data validation for request handlers and file system interactions throughout the codebase.

How do I manage environment-based secrets and sandbox egress controls?▼

Secret management and sandbox egress controls are handled through environment-based configurations and sandbox firewall rules, standardizing hardening guidance and securing secret handling across services.

Can I run an adversarial security review pass over a branch?▼

Yes, you can run the built-in security-review skill to perform an adversarial pass over a branch, verifying the security posture and checking for vulnerabilities before merging changes.