skill-security-framing

Apply security framing to external content fetch and analysis workflows.

4.0k|369|Updated Jan 15, 2026
One-click install
npx skills add https://github.com/nyldn/claude-octopus --skill skill-security-framing
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: skill-security-framing
Source: https://github.com/nyldn/claude-octopus/tree/main/skills/skill-security-framing
Command: npx skills add https://github.com/nyldn/claude-octopus --skill skill-security-framing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This security framework standardizes how external content is fetched and analyzed by ensuring every step is enclosed in a protective security context, preventing execution of untrusted content.

Core Features & Use Cases

  • Enforces URL validation, safe fetch controls, and platform-specific content transformations.
  • Wraps external content in a security context and marks it as UNTRUSTED to prevent any execution of embedded instructions.
  • Provides a standard template for subagent prompts and sanitized outputs to minimize prompt-injection risk.

Quick Start

Apply security framing to every external content fetch and analysis task.

Frequently Asked Questions about skill-security-framing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent prompt injection when analyzing untrusted external content?

Security framing prevents prompt injection by wrapping fetched external content in a protective context marked as UNTRUSTED, ensuring embedded instructions are treated strictly as data rather than executed.

What is the best way to secure web-fetch operations across different AI workflows?

The best way to secure web-fetch operations is standardizing content retrieval with URL validation, content wrapping, and standardized subagent prompts to enforce safe fetch controls across platforms.

Can I use security framing for external content analysis on multiple platforms like Codex and Claude?

Yes, security framing can be applied across Codex, Gemini, and Claude workflows to standardize content fetch and analysis tasks, ensuring external content is consistently treated as data.

How does content wrapping protect against untrusted content execution?

Content wrapping protects against execution by enclosing external data in a security context explicitly marked as UNTRUSTED, which prevents the AI model from executing any embedded instructions.

When do I need to apply security framing to my content fetch tasks?

You need to apply security framing to every external content fetch and analysis task to ensure all untrusted external content is enclosed in a protective security context and treated strictly as data.