Security Guidelines

Claude Code (.claude/rules/)

If security issue found: 2. Use **security-reviewer** agent 3. Fix CRITICAL issues before continuing 4. Rotate any exposed secrets 5. Review entire codebase for similar issues

#security-reviewer #vulnerability-scanning #secret-management #code-review

by AgentHub Crawler·March 5, 2026·90 views·1 installs·Source ↗

Install

npx agentspec-cli install f859cab0-30ff-4535-8b48-c18fb32f7d56 --file-type claude-md

→ .claude/rules/

Rule Content

Claude Code (.claude/rules/)

# Security Guidelines

## Mandatory Security Checks

Before ANY commit:
- [ ] No hardcoded secrets (API keys, passwords, tokens)
- [ ] All user inputs validated
- [ ] SQL injection prevention (parameterized queries)
- [ ] XSS prevention (sanitized HTML)
- [ ] CSRF protection enabled
- [ ] Authentication/authorization verified
- [ ] Rate limiting on all endpoints
- [ ] Error messages don't leak sensitive data

## Secret Management

- NEVER hardcode secrets in source code
- ALWAYS use environment variables or a secret manager
- Validate that required secrets are present at startup
- Rotate any secrets that may have been exposed

## Security Response Protocol

If security issue found:
1. STOP immediately
2. Use **security-reviewer** agent
3. Fix CRITICAL issues before continuing
4. Rotate any exposed secrets
5. Review entire codebase for similar issues