Skip to content

stevenacoffman/security

v0.1.0MIT

Security design: least privilege, multi-party authorization, zero trust, supply chain, and breakglass.

secure-by-construction-apis

Use when designing an API, framework, database layer, template system, or shell command API with injection-prone sinks (SQL injection, XSS, command injection), or when such bugs recur despite review. Make unsafe input impossible to compile instead of training developers.

Read SKILL.md at the source

Pinned to revision e4081cbb4d29, so it is the text this page describes rather than whatever the author pushed since.

Files

Every link opens the file at its source, pinned to the revision this page describes.