security is agent-read markdown (skill) from jnpiyush/agentx: Implement production security practices covering OWASP Top 10, input validation, injection prevention, and secrets management. Use when hardening applications against vulnerabilities, implementing authentication/authorization, managing secrets, configuring HTTPS/TLS, or conducting security audits..
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Security
> **Purpose**: Language-agnostic security practices to protect against common vulnerabilities.
> **Focus**: Input validation, injection prevention, authentication, secrets management.
> **Note**: For language-specific implementations, see [C# Development](../../languages/csharp/SKILL.md) or [Python Development](../../languages/python/SKILL.md).
---
## When to Use This Skill
- Hardening applications against OWASP Top 10
- Implementing authentication and authorization
- Managing secrets and credentials securely
- Configuring HTTPS/TLS
- Conducting security audits
## Prerequisites
- OWASP Top 10 awareness
- Understanding of HTTP security headers
## Decision Tree
```
Security concern?
+- User input? -> VALIDATE + SANITIZE (see Input Validation)
| +- Goes into SQL? -> Parameterized queries ONLY
| +- Goes into HTML? -> Encode output (XSS prevention)
| - Goes into shell? -> Avoid; use SDK/API instead
+- Authentication?
| +- New system? -> Use established provider (OAuth2/OIDC)
| - Existing? -> Verify token validation, session management
+- Secrets/credentials?
| +- In code? -> REMOVE -> use env vars or vault
| - In config? -> Move to secrets manager
…
Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
GET https://markdownregistry.com/api/v1/artifacts/art_pydauxrconen3mdl
GET https://markdownregistry.com/api/v1/resolve?ref=jnpiyush/agentx/security
GET https://markdownregistry.com/api/v1/blob/f46956579e852542816314eb06b0a964f2ccdee62b58d13af6d51a0797fd35ef
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
jnpiyush/agentx · .github/skills/ai-systems/agent-observability/SKILL.md · Instrument LLM agents with tracing, metrics, and evaluation telemetry. Use when adding OpenTelemetry GenAI semantic…
jnpiyush/agentx · .github/skills/ai-systems/ai-agent-development/SKILL.md · Build production-ready AI agents with Microsoft Foundry and Agent Framework. Use when creating AI agents, selecting LLM…
jnpiyush/agentx · .github/skills/ai-systems/ai-evaluation/SKILL.md · Use when evaluating AI quality, safety, completeness and cost with held-out tasks, executable graders, calibrated…
jnpiyush/agentx · .github/skills/ai-systems/ai-safety-and-red-teaming/SKILL.md · Defend LLM systems against prompt injection, jailbreaks, data exfiltration, and unsafe output. Covers input/output…
boshu2/agentops · skills/security/SKILL.md · Review code or scan for security vulnerabilities, secrets, dependencies and prompt risks. Use when: concrete exposure…
boshu2/agentops · images/gemini/skills/security/SKILL.md · Review code or scan for security vulnerabilities, secrets, dependencies and prompt risks. Use when: concrete exposure…
boshu2/agentops · skills-codex/security/SKILL.md · Review code or scan for security vulnerabilities, secrets, dependencies and prompt risks. Use when: concrete exposure…
