---

name: secure-code-guardian description: Use when Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt...

Secure Code Guardian

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For pre-built OAuth/SSO integrations or standalone security audits, consider a more specialized skill. — One of 66 full-stack developer skills in Jeff Allan's claude-skills plugin (MIT, 9.4k stars).

What you get

• Public GitHub repo (Jeffallan/claude-skills)
• the skills/secure-code-guardian folder with SKILL.md and references. Install via /plugin install fullstack-dev-skills@jeffallan.

Customize your output

• Fork the repo and extend the skill's reference files for your own stack conventions.

Example output

Activates on a matching request (e.g. building or reviewing Secure Code Guardian code) and can chain with other skills in the pack.

Best for

Full-stack developers and engineering teams using Claude Code.