security-privacy
Security and privacy rules for implementations
Install / Use
npx skills add AK2083/DojoSphereInstalls into whichever agent you are using.
Skill content
View source on GitHubdescription: Security and privacy rules for implementations alwaysApply: true
Technical security rules:
- Do not store secrets, API keys, service role keys, tokens, or passwords in the renderer, frontend, repository, SQLite, or logs.
- Supabase service role keys must never be used in the Electron renderer or normal client code.
- SQLite access happens only in the Electron main process or trusted local services.
- Renderer code must not make security-critical decisions on its own.
- Every privileged IPC operation must verify session, user, and permission.
- Never store session tokens in plaintext; store secure hashes only.
- Logs must not contain full personal records, session IDs, tokens, or sensitive content.
- Migrations must not delete user data without an explicit, documented decision.
- Sync must not overwrite local data without conflict detection.
Related Skills
Anthropic-Cybersecurity-Skills
32.2k817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains ·…
nanoclaw
30.7kA lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
SkillSpector
16.2kSecurity scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
hexstrike-ai
11.6kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research.
Security Score
Audited on Invalid Date