Agent skill
forge-security
Enforces security guardrails for Claude Code. Blocks access to secrets, credentials, and sensitive files. Requires confirmation for network requests and infrastructure changes. Use when accessing files, making network requests, or running infrastructure commands.
Install this agent skill to your Project
npx add-skill https://github.com/martimramos/claude-forge/tree/main/skills/security
SKILL.md
Security Guardrails
Blocked Operations (NEVER do these)
The following are blocked without exception:
- Reading or writing
.envfiles - Accessing files matching:
*secret*,*credential*,*password*,.aws/*,.ssh/*,*token* - Running destructive IaC commands without explicit user request
See reference/blocked-patterns.md for complete list.
Ask First (require user confirmation)
These operations require explicit user approval:
- Network requests (WebFetch)
- Git push, merge, rebase operations
- Infrastructure commands: terraform plan/apply, kubectl apply, ansible-playbook
See reference/ask-patterns.md for complete list.
When Uncertain
If unsure whether an operation is safe:
- Stop and explain what you're about to do
- List what files/systems will be affected
- Wait for explicit user confirmation
Never assume permission. When in doubt, ask.
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
martimramos/claude-forge
forge-lang-c
C development standards including make, gcc/clang, valgrind, and cppcheck. Use when working with C files, Makefiles, or CMakeLists.txt.
martimramos/claude-forge
forge-lang-terragrunt
Terragrunt wrapper for Terraform with DRY configurations. Enforces plan-before-apply workflow. Use when working with terragrunt.hcl files.
martimramos/claude-forge
forge-lang-cpp
C++ development standards including make/cmake, g++/clang++, and static analysis. Use when working with C++ files (.cpp, .hpp, .cc, .hh).
martimramos/claude-forge
forge-lang-rust
Rust development standards including cargo test, clippy, and rustfmt. Use when working with Rust files, Cargo.toml, or Rust tests.
martimramos/claude-forge
forge-lang-ansible
Ansible automation safety practices. Enforces check-mode-first workflow. Use when working with playbooks, roles, or inventory files.
martimramos/claude-forge
forge-lang-typescript
TypeScript development standards including type checking, jest/vitest, eslint, and prettier. Use when working with TypeScript files, tsconfig.json, or .ts/.tsx files.
Didn't find tool you were looking for?