Security Engineering & Fortification Skill

Activate this skill when designing or implementing authentication, authorization, database access, file systems, external networking, API endpoints, cryptographic routines, or conducting security audits (/security-audit).

Zero-Trust Security Law: Never trust client input, never assume identity without server validation, parameterize all queries, and enforce least-privilege defense-in-depth across every boundary.

1. Automated Secret & Pattern Scanner

Before committing code or completing any task, run the automated security scanner:

# Run deterministic secret and vulnerability checks
node skills/security/scripts/scan-secrets.js