We split this skill into the rules it gives an agent

6 rules. About 0 are common, 6 are distinctive, and 0 are very specific to this project.

• ≈0

  Common · estimate

  Many files like this have a rule of this kind.

• ≈6

  Distinctive · estimate

  This author's own choices. Worth a look.

• 0

  Very specific

  Tied to their project's names, files or tools. Probably skip.

• Common
• Distinctive
• Very specific
• could be automatic: a setting could enforce it

1. Distinctive:

   When touching sensitive areas of the codebase, strictly adhere to this security checklist:

   line 7
2. Distinctive:

   Input Validation: Never trust user input. Ensure all incoming data is validated and typed before processing.

   line 9
3. Distinctive:

   Authorization: Verify the user has the correct permissions (not just authentication) to perform the action or access the data.

   line 11
4. Distinctive:

   Secrets Management: Never hardcode API keys, tokens, or passwords.

   line 12
5. Distinctive:

   SQL/NoSQL Injection: Always use parameterized queries or ORM methods that automatically escape inputs.

   line 13
6. Distinctive:

   Do not merge any code that bypasses these checks.could be automatic

   line 15

≈ “Common” is an estimate: at least 1 in 5 of the 350,495 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.