security-hardening

AIDefence security layer with prompt injection blocking, input validation, sandboxed execution, output sanitization, and STRIDE threat modeling.

Files2

View on GitHub

SKILL.md

GitHub
  • When processing untrusted inputs
  • Security audits of agent-generated code
  • Compliance verification (OWASP Top 10, CIS)

AIDefence Layers

  1. Prompt Injection Detection - Pattern + heuristic blocking
  2. Input Validation - Path traversal, type coercion, parameter sanitization
  3. Static Analysis (SAST) - Vulnerability scanning, CWE matching
  4. Sandboxed Execution - Network isolation, filesystem restrictions, resource limits
  5. Output Sanitization - Secrets, PII, injection vector redaction

Security Levels

Level Layers Use Case
standard SAST + validation + sanitization Routine audits
elevated + threat modeling + compliance Pre-release audits
maximum + sandbox + full STRIDE + remediation Critical systems

Agents Used

  • agents/security-auditor/ - Vulnerability detection
  • agents/reviewer/ - Code quality verification

Tool Use

Invoke via babysitter process: methodologies/ruflo/ruflo-security-audit

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061