claudify-agent 1.0.1 → 1.0.3

package/.claude/skills/{security.md → security-guide/SKILL.md}

@@ -1,6 +1,12 @@
+---
+name: security-guide
+description: "Defensive coding checklist (OWASP Top 10): secrets management, injection prevention, authentication/authorization, input validation. Use when writing or reviewing auth, endpoints, webhooks, database queries, or code handling user input or secrets."
+---
+
 # Security & Defensive Coding Standards (OWASP Top 10)
 
 ## Mandatory Checks
+
 1. **Secrets Management:**
    - NEVER commit `.env`, `.pem`, API keys, or JWT secrets to source control.
    - Always reference environment variables via `process.env.VARIABLE_NAME`.
@@ -16,3 +22,7 @@
 
 4. **Input Validation:**
    - All external payload boundaries (HTTP Body, Query Params, Webhooks) must be strictly validated with Zod/Valibot schemas.
+
+## Related
+- Critical rules: @.claude/rules/security-critical.md
+- The `auto-security-review` Stop hook scans code written each turn and blocks on critical/high findings.

package/.claude/skills/solidity-guide/SKILL.md

@@ -1,3 +1,8 @@
+---
+name: solidity-guide
+description: "Solidity and smart contract security: reentrancy, access control, gas optimization, Foundry/Hardhat verification. Use when writing or reviewing Solidity contracts."
+---
+
 # Solidity & Smart Contract (SMC) Security Skill
 
 ## 1. Smart Contract Security Mandates (Critical)