claudecodex

secure-coding

Write and review application code in Java, Kotlin, C#, Python and TypeScript with rules for the risks in the OWASP Top 10, the OWASP API Security Top 10 and the OWASP Top 10 for LLM Applications: access checks per object and tenant, safe queries and paths, no type names from input, no secrets or fødselsnummer in logs, Maskinporten and ID-porten tokens, and language-model features. Keeps answers in proportion: no new dependencies or invented helpers, minimal fixes, tests that fail without the control, and no findings for safe code.

0 on GitHubby Sindre Eik de Langev0.1.0MITupdated 18 days agosecurity
/

Plugin secure-coding from marketplace ks-digital-skills in ks-no/ks-digital-skills. Commands read from the repo's manifest — 17 days ago.

What it installs

Skills (1)

  • secure-coding

    Use when you write, change or review application code in Java, Kotlin, C#, Python or TypeScript that handles requests, authentication or authorization, sessions or tokens, OAuth2 or OpenID Connect (also Maskinporten and ID-porten), SQL or other queries, files and paths, shell commands, deserializati

View source on GitHub

More from ks-no/ks-digital-skills

All 8 plugins →

Write and rewrite English in ASD-STE100 (Simplified Technical English) style, adapted from the MIT-licensed danyuchn/asd-ste100-skill: short sentences, active voice, one instruction per sentence, no semicolons, one word for one meaning, and hedges kept intact. Use for tool descriptions, error messages, prompts, inter-agent instructions, procedures and status reports, or when the user asks for STE, STE100 or "80% STE". Norwegian domain terms stay Norwegian.

1 skill

0

asd-ste100-norsk

claudecodex

Write Norwegian bokmål technical text with the discipline of ASD-STE100 (Simplified Technical English), adapted to Norwegian grammar: imperative and one instruction per sentence, active voice instead of s-passive, sentence length caps, no semicolons, short compounds, one word for one meaning, and hedges kept intact. Use for instructions, error messages, operational notices, procedures and Norwegian field descriptions, or when the user asks for STE in Norwegian. Pairs with norsk-sprakvask, which owns spelling, punctuation and term choice.

1 skill

0

Write and review Dockerfiles, Helm charts and Kubernetes or OpenShift manifests with rules for the risks in the OWASP Top 10 and the OWASP Kubernetes Top 10: images that run as a user that is not root and with a random user ID, pinned base images, no secrets in layers, a restricted security context, no host access, secrets from Secret objects, least-privilege RBAC, and oc and kubectl commands that do not show secrets or change the cluster. Keeps answers in proportion: minimal fixes, no invented tags, paths or user IDs, and no findings for safe settings.

1 skill

0

Write and review GitHub Actions workflows, reusable workflows and composite actions so that text, code and artifacts from forks, issues and comments cannot reach the token and the secrets. Covers expression injection, privileged triggers such as pull_request_target and workflow_run, least-privilege permissions, actions pinned to a commit SHA, secrets and OIDC, caches, self-hosted runners and language-model steps. Includes a review mode mapped to the OWASP Top 10 CI/CD Security Risks.

1 skill

0

Verify the behaviour of a change to a web interface with the component tests of the project, then give the user a short click-through for what tests cannot show, such as layout, styles and visible focus. The agent does not run the app or a browser. It fixes the steps that the user reports as failed.

1 skill

0

norsk-sprakvask

claudecodex

Write and proofread Norwegian bokmål to Språkrådet norms and public-sector plain-language guidance, tailored to KS Digital: catches English-influenced phrasing and punctuation, inconsistent word forms, compound-word splits and AI-text markers in UI text, docs, commit messages, Jira issues and e-mail. Use whenever generating or editing Norwegian text.

1 skill

0

Similar plugins

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Automated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives

1 command

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Use Alibaba Open Code Review from local Codex.

2 skills

alibaba/open-code-review 50,068

Maintain secure-coding?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins8 plugins