What is the discover-security skill?

It is a discovery gateway for Claude Code that automatically identifies and loads specific security sub-skills based on your current coding task, such as authentication or input validation.

Can it help with OWASP compliance?

Yes, it includes specialized modules for vulnerability assessment and input validation specifically aligned with the OWASP Top 10 vulnerabilities.

When does this skill activate?

It auto-activates whenever Claude detects work related to security headers, authentication systems, API security, or data sanitization.

How does progressive loading work?

Instead of loading all security documentation at once, this skill helps Claude selectively load only relevant modules, saving tokens and improving the accuracy of security recommendations.

Does it support cloud secrets management?

Absolutely. It provides specific workflows for integrating with professional tools like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager.

Security Discovery & Hardening

Name: Security Discovery & Hardening
Author: rand

byrand

•

Security & Testing

Automates the identification and application of specialized security skills for authentication, vulnerability assessment, and application hardening.

This skill acts as an intelligent gateway for Claude Code, enabling context-aware discovery of specialized security sub-skills. It automatically activates during tasks involving authentication, authorization, secrets management, and OWASP-compliant vulnerability assessments. By providing a structured roadmap for security workflows—ranging from secure web application development to DevSecOps pipelines—it ensures that developers implement industry-standard best practices like input validation, security headers, and credential management while maintaining high context efficiency.

Key Features

01Comprehensive coverage of OWASP Top 10 and vulnerability assessment

02Structured workflows for Identity and Access Management (IAM)

0357 GitHub stars

04Progressive loading of specialized sub-skills to optimize token usage

05Deep integration with API, Database, and Infrastructure security patterns

06Context-aware auto-activation for security-sensitive coding tasks

Use Cases

01Implementing secure Authentication and Authorization (JWT, OAuth2, RBAC)

02Managing secrets and credentials using Vault or AWS Secrets Manager

03Performing security audits and automated OWASP vulnerability testing

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add rand/cc-polymath discover-security

For use in Claude.ai and ChatGPT

Download Skill