Security Guidance

Checks every file edit and commit for security holes before they happen, mapping issues to OWASP and enterprise security frameworks.

Security / Developmentsecuritydevelopment

Or just install the prompt above — no subscription needed

About this skill

name: security-guidance description: Use when Checks every file edit and commit for security holes before they happen, mapping issues to OWASP and enterprise security frameworks.

Security Guidance

Security Guidance runs a real-time security review on every action Claude takes. It monitors file edits, commits, and tool calls for vulnerabilities before they execute, mapping findings to OWASP and other enterprise frameworks used by billion-dollar software companies. Enterprises now treat this as mandatory, not optional.

What you get

Pre-execution security scanning, OWASP-mapped vulnerability reports, risky operation flags before code runs, enterprise-grade security coverage for autonomous Claude sessions.

Customize your output

Pair with Semgrep skills for deeper security reviews. Configure which frameworks to check against (OWASP, SANS, custom).

Example output

Security report: SQL injection risk flagged at database query line 42, mapped to OWASP A03:2021 — Injection. Fix suggested before execution.

Best for

Developers, vibe coders, and enterprises deploying autonomous Claude agents who need security coverage baked into every session.

Source: Doobie · https://www.youtube.com/watch?v=1GgyJfCK608 Category: Security / Development · Priority: Standard

SKILL.md preview

---
name: security-guidance
description: Use when Checks every file edit and commit for security holes before they happen, mapping issues to OWASP and enterprise security frameworks.
---

# Security Guidance

Security Guidance runs a real-time security review on every action Claude takes. It monitors file edits, commits, and tool calls for vulnerabilities before they execute, mapping findings to OWASP and other enterprise frameworks used by billion-dollar software companies. Enterprises now treat this as mandatory, not optional.

## What you get

- Pre-execution security scanning, OWASP-mapped vulnerability reports, risky operation flags before code runs, enterprise-grade security coverage for autonomous Claude sessions.

## Customize your output

- **Pair with Semgrep...