Agent skill · security · yonatangross
security-patterns
Auth, defense in depth, input validation, OWASP Top 10, LLM prompt-injection defense and PII masking. Use when implementing auth or security layers.
Why this skill is useful
Adds executable scripts for JWT token generation, PII masking, and schema validation that enhance security practices beyond standard knowledge.
What it needs
Requires argon2, jwt, langfuse, zod installed locally. About 10k tokens when loaded. Last updated 2026-08-06. 215 stars on the source repository.
What this skill does
Security Patterns Comprehensive security patterns for building hardened applications. Each category has individual rule files in rules/ loaded on-demand. Quick Reference Category Rules Impact When to Use ---------- ------- -------- ------------- Authentication upstream CRITICAL JWT tokens, OAuth 2.1/PKCE, RBAC/permissions Defense-in-Depth 1 CRITICAL Multi-layer security, zero-trust architecture Input Validation 2 HIGH Schema validation (Zod/Pydantic), output encoding, file uploads OWASP Top 10 1 CRITICAL Injection prevention, broken authentication fixes LLM Safety refs HIGH Prompt injection defense, output guardrails, content filtering PII Masking refs HIGH PII detection/redaction with Presidio, Langfuse, LLM Guard Scanning upstream HIGH Dependency audit, SAST (Semgrep/Bandit), secret detection Advanced Guardrails 2 CRITICAL NeMo/Guardrails AI validators, red-teaming, OWASP LLM Total: 6 rule files across 4 categories. Topics marked "upstream" or "refs" keep only the ork delta here: floors and key decisions in this file, scars and house decisions in references/ork-delta.md, and first-party sources in Upstream coverage. Quick Start Authentication Secure authentication with OAuth 2.1, Passkeys/WebAuthn, JWT tokens, and role-based access control. Implementation tutorials for JWT, OAuth 2.1/PKCE/DPoP, Passkeys/WebAuthn, RBAC, and MFA are upstream-covered (see Upstream coverage). The ork delta, including the argon2-cffi-over-passlib scar, lives in references/ork-delta.md. Key Decisions: Argon2id > bcrypt Access tokens 15 min PKCE required Passkeys > TOTP > SMS Defense-in-Depth Multi-layer security architecture with no single point of failure. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills yonatangross/security-patterns