跳到正文
cccskills
免费在 GitHub 公开

python-security

Secure Python services against secret leakage, injection, unsafe subprocess calls, and dependency drift. Use when handling env vars, tokens, SQL, file paths, shell commands, auth flows, or Python security gates.

中文简介正在准备中。当前显示原文说明。

查看安装方法

包含的文件(2)

  • SKILL.md1.4 KB
  • evals/evals.json1.2 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Python Security

Priority: P0 (CRITICAL)

Rules

  • Keep secrets in env or secret stores; never hardcode them in code or fixtures.
  • Parameterize SQL and validate file or path inputs before use.
  • Prefer subprocess.run([...], shell=False) with explicit args.
  • Audit dependency surfaces and keep security gates current.

Recipe

  1. Classify inputs: trusted config, semi-trusted runtime data, untrusted user or PR text.
  2. Validate or normalize before boundary calls.
  3. Redact secrets from logs, reports, and artifacts.
  4. Use least-privilege filesystem and process execution.
  5. Run dependency/security verification after auth or gate changes.

Anti-Patterns

  • No shell string execution for user-shaped input.
  • No secrets in example configs, tests, or docs.
  • No direct path joins from untrusted input without root checks.
  • No "internal-only" exception to SQL or subprocess hygiene.

References

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Upgrade an Android project to Android Gradle Plugin (AGP) 9. Use when migrating to AGP 9, updating Gradle build files, migrating to built-in Kotlin, or adopting the new AGP DSL.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5802026年10月21日 更新

Apply Clean Architecture layering, modularization, and Unidirectional Data Flow in Android projects. Use when setting up project structure, placing code in layers, configuring feature/core modules, or implementing UDF patterns; defer Compose state and ViewModel/StateFlow implementation to their specific skills.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5802026年10月21日 更新

Implement WorkManager and background processing correctly on Android. Use when creating Worker classes, scheduling tasks, choosing between WorkManager and Foreground Services, or setting up Hilt in workers; defer FCM and notification delivery to android-notifications.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5802026年10月21日 更新

Build high-performance declarative UI with Jetpack Compose. Use when writing Composable functions, optimizing recomposition, hoisting state, or working with LazyColumn and side effects; defer deep-link and navigation routing to android-navigation.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5802026年10月21日 更新

Migrate an Android XML View to Jetpack Compose following a structured 10-step workflow. Use when converting XML layouts to Compose, setting up Compose in an existing View-based project, or incrementally adopting Compose.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5802026年10月21日 更新

Write correct coroutine scopes, lifecycle collection, and dispatcher injection in Android production code. Use for suspend functions, coroutine scopes, and dispatcher mechanics; defer ViewModel StateFlow/LiveData architecture, Fragment lifecycle recipes, persistence/notifications, and unit-test recipes to their specific skills.

中文简介正在准备中。当前显示原文说明。

HoangNguyen0403/agent-skills-standard5802026年10月21日 更新

查看 HoangNguyen0403 的全部技能

报告此技能的问题