transport-security-setup SKILL.md skillA
transport-security-setup from nerviz-ai/nerviz is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add nerviz-ai/nerviz/transport-security-setup@git:20261006.907b1c8Pins git:20261006.907b1c8 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- nerviz-ai/nerviz
- Path
.claude/skills/transport-security-setup/SKILL.md- Versions recorded
- 4
- Latest version
- git:20261006.907b1c8, committed Oct 6, 2026
- First version recorded
- Oct 5, 2026
- Size
- 13,473 bytes
- Repository stars
- 8
- License
- MIT
Decides where TLS terminates for a generated or adopted Spring Boot project — at the edge (ingress, load balancer, Caddy) or in the embedded Tomcat, with mutual TLS as a recorded variant — and writes the matching configuration: forwarded headers and trusted proxies, or an SSL bundle with reload and profile-gated TLS; HTTP/2 on; HSTS with exactly one writer; the integration test that proves it on a real server; a local Caddy edge through docker-architect. Use when the request involves HTTPS…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Transport Security Setup Decides once, per project, how a request reaches it over TLS, and writes what that decision needs. One question decides the shape: **where does TLS terminate?** At the edge → the application holds no key and learns the scheme from the edge's forwarded headers. In the embedded server → the application loads a mounted certificate through an SSL bundle and serves 8443. Every rule this skill applies is `@.claude/rules/transport-security.md`; every rule about key material is `@.claude/rules/secrets.md`. **Entry rule: decide once.** The root `CLAUDE.md` already has a `**Transport:` paragraph → report "already decided", quote it, and stop. Changing topology is a new decision: the user deletes the paragraph and runs `/transport-security-setup` again, which then rewrites the configuration it owns. When the paragraph is missing but `application.yml` already holds `server.ssl`, `spring.ssl.bundle` or `forward-headers-strategy`, the project decided by hand: report the lines found, ask which topology they implement, and write only the paragraph — never rewrite a configuration this skill did not write. …
Read the whole file at its exact version.
How to install
mdr add nerviz-ai/nerviz/transport-security-setup@sha256:39baa9d6278305acThe line at the top of this page pins the label git:20261006.907b1c8, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_6ntw6njzagm7gafy)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 4 versions of this file, between Oct 5, 2026 and Oct 6, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261006.907b1c8 latest | 2026-10-06 | 907b1c8 | 13,473 B | A | view · diff |
| git:20261005.93faf88 | 2026-10-05 | 93faf88 | 12,664 B | A | view · diff |
| git:20261005.bc76a22 | 2026-10-05 | bc76a22 | 12,322 B | A | view · diff |
| git:20261005.771a540 | 2026-10-05 | 771a540 | 12,360 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (13473 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
nerviz-ai/nerviz · 8 stars · license MIT · pushed 2026-10-21 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_6ntw6njzagm7gafy GET https://markdownregistry.com/api/v1/resolve?ref=nerviz-ai/nerviz/transport-security-setup GET https://markdownregistry.com/api/v1/blob/39baa9d6278305ac9052f98a119da72b12dbec403cf83cc2c5a889f0736a7814
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.
More from nerviz-ai/nerviz
Every file in nerviz-ai/nerviz