martinholovsky/sota-skills · skills/sota-code-security/SKILL.md
sota-code-security skillA
State-of-the-art secure coding and security auditing rules (2026 baseline). Use whenever BUILDING or modifying code that crosses a trust boundary — endpoints, handlers, auth/login/signup, sessions, JWT/OAuth, file uploads, payments, multi-tenant features, crypto/secrets handling, parsers, CLI/exec wrappers, LLM agents or tool-calling — AND whenever AUDITING code for security (security review, pentest-prep, vulnerability hunt, threat model, hardening, OWASP, CWE, secrets leak, "is this code safe"
Latest version
mdr add martinholovsky/sota-skills/sota-code-security@git:20260903.36172e4Exact content
mdr add martinholovsky/sota-skills/sota-code-security@sha256:f0770eb5a5363114Badge
[](https://markdownregistry.com/a/art_ca45hc5i7xik5m5t)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260903.36172e4 latest | 2026-09-03 | 36172e4 | 20,095 B | A | view · diff |
| git:20260903.02cb41e | 2026-09-03 | 02cb41e | 19,933 B | A | view · diff |
| git:20260820.7720f5a | 2026-08-20 | 7720f5a | 19,562 B | A | view · diff |
| git:20260819.c3bf10d | 2026-08-19 | c3bf10d | 17,909 B | A | view · diff |
| git:20260816.827df59 | 2026-08-16 | 827df59 | 17,819 B | A | view |
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (20095 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
martinholovsky/sota-skills · 18 stars · license CC-BY-4.0 · pushed 2026-09-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ca45hc5i7xik5m5t GET https://markdownregistry.com/api/v1/resolve?ref=martinholovsky/sota-skills/sota-code-security GET https://markdownregistry.com/api/v1/blob/f0770eb5a5363114dba634e18247dd341fb2e802a1859a5feef81efcdbaa918b