Claude Skills by harperaa

github.com/harperaa

28 skillsA× 22B× 2C× 2D× 1F× 10 installs3 views

Git WorkflowAThe end-to-end branch workflow for this repo — how the slash commands chain together to go from starting a feature to opening a PR, how to park work mid-task, and how to keep branches current. Use when starting new work, when unsure which command comes next, or when a branch has fallen behind main.ai-agentsgotestingVotes: 0GitHub stars: 2
Llm Seo Blog EngineABuilding a blog optimized for both traditional SEO and AI crawlers like ChatGPT, Claude, and Perplexity. Covers llms.txt implementation, static site generation for AI crawler compatibility, sitemap automation, robots.txt configuration for GPTBot/ClaudeBot, MDX blog setup in Next.js 15 App Router, JSON-LD structured data, and RSS feed generation. Use this when building blogs, content sites, or any public-facing pages that need to be discoverable by LLMs and AI search engines.developmentjavascripttypescriptVotes: 0GitHub stars: 2
Ai Chat ProtectionFProtect AI chatbots from prompt injection, jailbreaking, and manipulation attacks. Use this skill when implementing AI chat features, validating chat prompts, preventing prompt injection, protecting LLM integrations, or securing AI user interfaces. Triggers include "AI chat security", "prompt injection", "jailbreak prevention", "LLM security", "chatbot protection", "validatePrompt", "prompt validation", "AI safety", "prompt sanitization".securityjavascripttypescriptVotes: 0GitHub stars: 2
Auth SecurityAImplement secure authentication and authorization using Clerk. Use this skill when you need to authenticate users, protect routes, check permissions, implement subscription-based access control, or integrate Clerk with your application. Triggers include "authentication", "auth", "authorization", "Clerk", "protect route", "check user", "sign in", "session", "permissions", "subscription access".securitytypescriptrustVotes: 0GitHub stars: 2
Csrf ProtectionBImplement Cross-Site Request Forgery (CSRF) protection for API routes. Use this skill when you need to protect POST/PUT/DELETE endpoints, implement token validation, prevent cross-site attacks, or secure form submissions. Triggers include "CSRF", "cross-site request forgery", "protect form", "token validation", "withCsrf", "CSRF token", "session fixation".securityjavascripttypescriptVotes: 0GitHub stars: 2
Dependency SecurityAManage dependencies and supply chain security to prevent vulnerable or malicious packages. Use this skill when you need to audit dependencies, update packages, check for vulnerabilities, understand supply chain attacks, or maintain dependency security. Triggers include "dependencies", "npm audit", "supply chain", "package security", "vulnerability", "npm update", "security audit", "outdated packages".securitygobashVotes: 0GitHub stars: 2
Error HandlingAImplement secure error handling to prevent information leakage and provide appropriate error responses. Use this skill when you need to handle errors in API routes, prevent stack trace exposure, implement environment-aware error messages, or use the error handler utilities. Triggers include "error handling", "handle errors", "error messages", "information leakage", "stack trace", "handleApiError", "production errors", "error responses".securityjavascripttypescriptVotes: 0GitHub stars: 2
Input ValidationAValidate and sanitize user input to prevent XSS, injection attacks, and ensure data quality. Use this skill when you need to validate forms, sanitize user input, prevent cross-site scripting, use Zod schemas, or handle any user-generated content. Triggers include "input validation", "validate input", "XSS", "cross-site scripting", "sanitize", "Zod", "injection prevention", "validateRequest", "safeTextSchema", "user input security".securityjavascripttypescriptVotes: 0GitHub stars: 2
Payment SecurityAImplement secure payments using Clerk Billing and Stripe without ever touching card data. Use this skill when you need to set up subscription payments, handle webhooks, implement payment gating, understand PCI-DSS compliance, or integrate Stripe Checkout. Triggers include "payment", "Stripe", "Clerk Billing", "subscription", "PCI-DSS", "credit card", "payment security", "checkout", "webhook", "billing".securitytypescriptrustVotes: 0GitHub stars: 2
Rate LimitingAImplement rate limiting to prevent brute force attacks, spam, and resource abuse. Use this skill when you need to protect endpoints from automated attacks, prevent API abuse, limit request frequency, or control infrastructure costs. Triggers include "rate limiting", "rate limit", "brute force", "prevent spam", "API abuse", "resource exhaustion", "DoS", "withRateLimit", "too many requests", "429 error".developmentjavascripttypescriptVotes: 0GitHub stars: 2
Auth VulnerabilitiesAUnderstand authentication and authorization defects in AI-generated code including insecure password storage, broken session management, and access control bypasses. Use this skill when you need to learn about auth vulnerabilities in AI code, understand why AI suggests MD5/plaintext passwords, recognize broken session patterns, or identify access control gaps. Triggers include "auth vulnerabilities AI", "password storage AI", "session management", "broken access control", "authentication defe...securityjavascripttypescriptVotes: 0GitHub stars: 2
Awareness OverviewAUnderstand the security risks inherent in AI-generated code and vibe coding. Use this skill when you need to understand why AI generates insecure code, statistics on vulnerabilities, real-world breach examples, or overall security awareness for AI-assisted development. Triggers include "vibe coding security", "AI code security", "AI vulnerabilities", "security risks AI code", "why AI insecure", "AI security awareness", "AI generated code risks".securityrustgoVotes: 0GitHub stars: 2
Business Logic FlawsAUnderstand business logic vulnerabilities in AI code including race conditions, integer overflow, and calculation errors that pass functional tests but create security holes. Use this skill when you need to learn about race conditions in AI code, understand integer overflow vulnerabilities, recognize business logic security flaws, or identify calculation errors. Triggers include "race conditions", "business logic vulnerabilities", "integer overflow", "race condition AI", "flash sale security"...securityjavascripttypescriptVotes: 0GitHub stars: 2
Information LeakageAUnderstand how AI-generated code exposes sensitive information through hardcoded credentials and verbose logging. Use this skill when you need to learn about hardcoded secrets in AI code, understand logging vulnerabilities, recognize exposed API keys, or prevent information disclosure. Triggers include "hardcoded credentials", "hardcoded secrets", "API keys in code", "information leakage", "verbose logging", "exposed secrets", "AWS keys", "logging vulnerabilities", "sensitive data logs".securityjavascripttypescriptVotes: 0GitHub stars: 2
Injection VulnerabilitiesDUnderstand how AI generates SQL injection, command injection, and XSS vulnerabilities. Use this skill when you need to learn about injection attack patterns in AI code, see real-world examples of injection vulnerabilities, understand why AI generates insecure database queries, or recognize vulnerable code patterns. Triggers include "SQL injection AI", "command injection", "XSS vulnerabilities", "injection attacks", "AI database queries", "shell injection", "cross-site scripting AI code".securityjavascripttypescriptVotes: 0GitHub stars: 2
Resource ExhaustionAUnderstand resource exhaustion and denial of service vulnerabilities in AI code including unbounded loops, missing rate limits, and uncontrolled resource consumption. Use this skill when you need to learn about DoS vulnerabilities in AI code, understand resource limits, recognize unbounded operations, or prevent resource exhaustion. Triggers include "resource exhaustion", "DoS vulnerabilities", "denial of service", "unbounded resources", "API cost protection", "memory exhaustion", "uncontroll...securityjavascripttypescriptVotes: 0GitHub stars: 2
Supply Chain RisksCUnderstand supply chain vulnerabilities and dependency risks in AI-generated code including outdated packages, malicious packages, and dependency confusion attacks. Use this skill when you need to learn about vulnerable dependencies in AI code, understand supply chain attacks, recognize typosquatting, or identify outdated package suggestions. Triggers include "supply chain attacks", "dependency vulnerabilities", "outdated packages", "malicious npm packages", "typosquatting", "dependency confu...securityjavascriptpythonVotes: 0GitHub stars: 2
Security HeadersAConfigure security headers to defend against clickjacking, XSS, MIME confusion, and SSL stripping attacks. Use this skill when you need to set up Content-Security-Policy, X-Frame-Options, HSTS, configure middleware headers, or understand browser security features. Triggers include "security headers", "CSP", "content security policy", "X-Frame-Options", "HSTS", "clickjacking", "MIME confusion", "middleware headers".developmentjavascripttypescriptVotes: 0GitHub stars: 2
Security LoggingALog security events with PII sanitization using the centralized security logger. Use this skill when implementing security monitoring, logging violations, building security dashboards, or testing security event detection. Triggers include "security logging", "log security event", "security dashboard", "logSecurity", "securityLogger", "PII sanitization", "security events", "violation logging", "test-security endpoint".developmentjavascripttypescriptVotes: 0GitHub stars: 2
Security OperationsCOperational security guidance for deployment, monitoring, and maintenance. Use this skill when you need to understand which middlewares to apply, configure environment variables, monitor security post-deployment, or follow the pre-deployment checklist. Triggers include "security operations", "deployment security", "security monitoring", "environment variables", "when to use middleware", "pre-deployment", "security checklist", "production security".securitytypescriptbashVotes: 0GitHub stars: 2
Security OverviewAUnderstand the defense-in-depth security architecture of Secure Vibe Coding OS. Use this skill when you need to understand the overall security approach, the 5-layer security stack, OWASP scoring, or when to use other security skills. Triggers include "security architecture", "defense in depth", "security layers", "how does security work", "OWASP score", "security overview", "security principles".securitytypescriptgoVotes: 0GitHub stars: 2
Security PromptsALibrary of battle-tested security prompt templates for secure feature implementation. Use when implementing forms, endpoints, authentication, authorization, file uploads, or conducting security reviews. Triggers include "security prompt", "secure form", "RBAC", "threat model", "STRIDE", "admin endpoint", "file upload", "security testing", "code review", "OWASP".securitytypescriptgoVotes: 0GitHub stars: 2
Auth AuthorizationAAuthentication and authorization prompt templates for RBAC implementation, permissions systems, ownership verification, and authorization testing. Use when setting up roles, implementing access control, or testing authorization logic. Triggers include "RBAC", "role-based access", "permissions", "ownership", "authorization", "access control", "user roles", "auth testing".securitytypescriptrustVotes: 0GitHub stars: 2
Built In ControlsASimple security prompt templates for quick implementations using existing Secure Vibe Coding OS utilities. Use for straightforward features like contact forms, authenticated updates, and public APIs. Triggers include "contact form", "simple form", "authenticated update", "user update", "public API", "read-only API", "quick secure implementation".securitytypescriptgoVotes: 0GitHub stars: 2
Prompt EngineeringAComprehensive security prompt templates for implementing secure features with multiple security layers. Use for complex implementations like forms, authenticated endpoints, public APIs, admin features, file uploads, middleware composition, and security testing. Triggers include "secure form", "authenticated endpoint", "public endpoint", "admin action", "file upload", "composable middleware", "security testing", "new security control".securitytypescriptgoVotes: 0GitHub stars: 2
Threat ModelingASecurity analysis and threat modeling prompt templates for STRIDE analysis, code review, OWASP compliance, and vulnerability assessment. Use for security planning, pre-deployment reviews, and ongoing threat assessment. Triggers include "STRIDE", "threat model", "security review", "code review", "OWASP", "payment security", "security analysis", "vulnerability assessment".securityrustgoVotes: 0GitHub stars: 2
Security TestingBTest security features and verify implementation before deployment. Use this skill when you need to test CSRF protection, rate limiting, input validation, verify security headers, run security audits, or check the pre-deployment security checklist. Triggers include "test security", "security testing", "verify security", "security checklist", "pre-deployment", "test CSRF", "test rate limit", "security verification".securityjavascriptgoVotes: 0GitHub stars: 2
Self InstallerAAutomated installation and setup of THIS Secure Vibe Coding OS SaaS application. This skill installs the current application only. Use when user says "install app", "setup app", "install this app", "install from readme", or "run the installation". Automates Clerk authentication setup, Convex backend configuration, webhook setup, billing enablement, and application testing using Playwright browser automation.securitybashnodeVotes: 0GitHub stars: 2