Agent skill · security · charleswiltgen
axiom-security
Use when storing credentials securely, encrypting data, implementing passkeys, securing AI/agentic features against prompt injection, code signing, or managing certificates and provisioning profiles.
Why this skill is useful
Provides specific commands and patterns for securing AI features against prompt injection and managing sensitive data that the AI wouldn't reliably generate on its own.
What it needs
About 7k tokens when loaded. Last updated 2026-08-06. 1,103 stars on the source repository.
What this skill does
Security & Credentials You MUST use this skill for ANY keychain, encryption, passkey, app integrity, agentic/AI feature security, file protection, or code signing work. <!-- AXIOMAUDITORINLINEBEGIN — rewritten for Codex by scripts/build-codex.ts; do not hand-edit --> Auditors are skills here. Where this router says "Launch some-auditor agent", invoke the matching Codex skill instead — same procedure, no Claude Code agent required. Available: axiom-scan-security-privacy. The ones that shell out — builds, tests, simulators, crash symbolication — need shell access to run. <!-- AXIOMAUDITORINLINEEND --> Quick Reference Symptom / Task Reference ---------------- ----------- Store tokens, passwords, API keys securely See skills/keychain.md Choose kSecAttrAccessible level, biometric protection See skills/keychain.md SecItem function signatures, attribute constants See skills/keychain-ref.md errSecDuplicateItem, errSecItemNotFound, errSecInteractionNotAllowed See skills/keychain-diag.md Encrypt data, sign payloads, key management See skills/cryptokit.md Hash functions, HMAC, AES-GCM, ChaChaPoly, ECDSA, EdDSA, key agreement See skills/cryptokit-ref.md Passkey sign-in, WebAuthn, ASAuthorizationController See skills/passkeys.md One-time code AutoFill for credential providers OS27 See skills/passkeys.md (Delivered Verification Codes) App integrity verification, DCAppAttestService, fraud metric See skills/app-attest.md Prompt injection, securing AI agents / agentic features, tool confirmation See skills/agentic-security.md NSFileProtection levels, data protection at rest See skills/file-protection-ref.md SensitiveContentAnalysis verdict must never leave the device (no analytics/moderation queue/synced cache; license §3.3.3) See axiom-vision (skills/vision-ref.md) Certificate management, provisioning profiles, CI/CD signing See skills/code-signing.md Certificate not found, profile mismatch, entitlement errors See skills/code-signing-diag.md Certificate CLI, profile inspection, ent …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills charleswiltgen/axiom-security--8bef3b