pudo-handoff
Write the PUDO session handoff (.pudo/session.md) so another session, tool or teammate can continue the work. Use when the user…
@dongduong2001Install SkillDevelopment
Skill
/security
Threat modeling, compliance, and secure by design architecture
Claude Code
$ npx -y skills add DongDuong2001/pudo-code-system --skill security --agent claude-code
Codex
$ npx skills add DongDuong2001/pudo-code-system --skill security -a codex -y
Cursor
$ npx skills add DongDuong2001/pudo-code-system --skill security -a cursor -y
Gemini CLI
$ npx skills add DongDuong2001/pudo-code-system --skill security -a gemini-cli -y
GitHub Copilot
$ npx skills add DongDuong2001/pudo-code-system --skill security -a github-copilot -y
OpenCode
$ npx skills add DongDuong2001/pudo-code-system --skill security -a opencode -y
Windsurf
$ npx skills add DongDuong2001/pudo-code-system --skill security -a windsurf -y
SKILL.md
security.SKILL.mdname: security-plan description: Threat modeling, compliance, and secure by design architecture
Security Planning Skill
This skill is focused on ensuring systems are resilient against attacks and inherently protect user data.
When to use this skill
- When performing Threat Modeling (STRIDE) for new features.
- When planning Authentication, Authorization, and Session Management.
- When adhering to compliance requirements (GDPR, HIPAA, SOC2).
Guidelines
- **Principle of Least Privilege:** Services and users should only have the bare minimum access permissions they need.
- **Defense in Depth:** Do not rely on a single defensive mechanism. Validate inputs at the client, the API edge, and the database boundary.
- **Secret Management:** Never hardcode secrets. Plan to use KMS, HashiCorp Vault, or environment-injected managed identities.
Stats
5
Stars
0
Forks
Active
Maintenance
TypeScript
Language
MIT
License
Last commit
Created
In this plugin
See everything inside 538 skills1 agent
Stars on GitHub
Momentum
- stars in total
- 5
Other skills on pudo-code-system.
@dongduong2001Install Skillpudo-plan
PUDO Plan phase: turn a request into a short plan card (goal, scope, out of scope, success criteria, risks, steps) before any…
@dongduong2001Install Skillpudo-review
PUDO Optimize gate: review the current diff against the plan before calling work done: correctness, edge cases, tests, scope…
@dongduong2001Install Skillpudo
PUDO workflow: Plan -> Understand -> Develop -> Optimize. Use on any non-trivial coding task (features, bug fixes, refactors,…
@dongduong2001Install Skillfastapi
- [ ] **API Design:** Define RESTful endpoints, path parameters, and query parameters. - [ ] **Data Validation:** Plan Pydantic…
@dongduong2001Install Skillrust
- [ ] **Framework Selection:** Choose web framework (Axum, Actix-web) based on performance vs. ecosystem needs. - [ ] **Crate…
@dongduong2001Install SkillMore skills from other plugins.
Auto-invoked
brainstorming
You MUST use this before any creative work - creating features, building components, adding functionality, modifying behavior, or…
@obraInstall Skillask-matt
Ask which skill or flow fits your situation. A router over the skills in this repo.
@mattpocockInstall SkillAuto-invoked
Questions about security.
- Which coding agents can use security?
- security installs in Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode and Windsurf with the skills CLI, using each agent's flag shown on this page. Flowy's auto-invocation, which fires a skill when your prompt matches, runs in Claude Code only.