Security Patterns

Name: Security Patterns
Author: yonatangross

Listed

yonatangross·vlatest·security·MIT

Helps with security, patterns as part of implementing security and authentication workflows.

Repository

Install on your platform

Showing Claude Code. One command installs this skill into any of the agents below.

Run this in your project

terminal

$ npx skills add yonatangross/orchestkit --skill security-patterns -a claude-code

Uses the open-source skills CLI and needs Node.js. Add -g to install it for your user instead of this project.

What we know about this skill

Publisher

yonatangross

Taken from the source listing. We haven't verified who controls this account.

Install target

Live repository

Not pinned. Installing fetches whatever the repository holds at the time you run the command.

No human has reviewed this code. The checks below are a static scan of the files at one commit — nobody has run this skill or judged whether it works. A skill runs with whatever access you give your agent, so read the source before you install it.

Automated safety checks

scanned 28 Sept 2026

This skill failed 1 of 6 checks. A failure is not proof of bad intent; it means something in the code needs a human to look at it before you run it.

Declares what it does: failed
No SKILL.md was found in the skill's directory.
SKILL.md exists, its frontmatter parses, and it declares a name and a description.
No undeclared network calls: passed
Makes no network calls.
Every host the skill dials — from its scripts, its config endpoints or the commands it tells the agent to run — is either well-known package and API infrastructure or declared in its own frontmatter. Links in documentation are not counted.
No obfuscated payloads: passed
No encoded or obfuscated payloads.
No base64, hex or compressed blob is decoded and then executed, and no encoded shell commands.
No credential access: passed
Reads no keys, tokens, keychains or credential files.
Neither the code nor the SKILL.md instructions read SSH keys, cloud credentials, keychains, token stores, browser cookie databases or dotfiles that hold secrets.
No pipe-to-shell installers: passed
No pipe-to-shell or download-and-run installers.
No `curl … | sh` pattern, in the code or in the instructions, that runs code fetched at run time.
Pinned to a commit: passed
Scanned yonatangross/orchestkit at 7784b90c05.
The exact upstream commit SHA that was scanned is recorded, so the result refers to specific bytes.

Commit: 7784b90c05
Manifest: src/skills/security-patterns/SKILL.md
Scanned: 0 files
Copies in repo: 2 — all of them scanned

This is a static scan, not a review. It reads the skill's files; it does not run them, and it cannot tell you whether the skill is any good or whether the code does what its description says. A skill runs with whatever access you give your agent.

What each check looks for →

About this skill

What it does

This skill provides a library of reusable security patterns designed to harden AI agent workflows and infrastructure. It enables developers to implement robust defenses against common vulnerabilities like prompt injection, unauthorized access, and data leakage within autonomous systems.

When to use it

Hardening Agent Prompts: Preventing attackers from manipulating an agent's instructions or bypassing safety filters via adversarial inputs.
Securing API Integrations: Enforcing strict authentication and authorization protocols when agents interact with external services or databases.
Data Privacy Compliance: Ensuring sensitive user data is handled according to regulatory standards before being processed by the model.
Infrastructure Protection: Applying defense-in-depth strategies to protect the underlying orchestration framework from exploitation.

Key capabilities

Modular security templates for common threat vectors
Automated validation of agent input and output streams
Integration hooks for identity verification services
Configuration presets for secure environment variables and secrets management

Example prompts

"Apply a prompt injection defense pattern to my customer support agent's system instructions."
"Generate a security configuration checklist for an AI agent accessing internal HR databases."
"Implement rate limiting and token validation patterns for this autonomous trading bot."

Tips & gotchas

Ensure your base orchestration framework supports the specific security libraries referenced in these patterns, as some may require external dependencies. Always test security configurations in a sandboxed environment before deploying agents to production networks to avoid accidental lockouts or service degradation.