security-guidance
by alirezarezvani (GitHub) in alirezarezvani/claude-skills
What it does
PreToolUse security-anti-pattern hook for Claude Code. Catches 12 common security risks (command injection, XSS, SQL injection, unsafe deserialization, GitHub Actions workflow injection, eval/new Function code injection) BEFORE the Edit/Write/MultiEdit operation completes. Session-state caching prev
Quoted from the skill's SKILL.md under its MIT license.
Our basic check found 1 pattern(s) worth a look, like shell pipes or credential paths. This is not proof of harm. Read the files before you install.
Install
git clone --depth 1 https://github.com/alirezarezvani/claude-skills.git /tmp/claude-skills mkdir -p ~/.claude/skills/ cp -r /tmp/claude-skills/engineering/security-guidance/skills/security-guidance ~/.claude/skills/security-guidance
The command copies the skill from the author's repo. SkillTrove does not host it.
Files
- SKILL.md
- references/pretooluse_hook_canon.md
Source: https://github.com/alirezarezvani/claude-skills/tree/main/engineering/security-guidance/skills/security-guidance. Checked 2026-10-13.
Similar skills
browser-testing-with-devtools
Tests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to inspect the DOM, capture...
code-review-and-quality
Conducts multi-axis code review. Use before merging any change. Use when reviewing code written by yourself, another agent, or a human. Use when you need to ...
constraint-driven-development
Establishes a project's quality bar as a written contract and stops agents quietly lowering it. Interviews the user on which dimensions matter, supplies sane...
deprecation-and-migration
Manages deprecation and migration. Use when removing old systems, APIs, or features. Use when migrating users from one implementation to another. Use when mi...
doubt-driven-development
Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when you want every assumption cross-examined before proceedi...
git-workflow-and-versioning
Structures git workflow practices. Use when making any code change. Use when committing, branching, resolving conflicts, splitting uncommitted work in a mess...