Babysitter web-security

OWASP Top 10, security headers, CSP, XSS prevention, and vulnerability prevention.

install
source · Clone the upstream repo
git clone https://github.com/a5c-ai/babysitter
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/a5c-ai/babysitter "$T" && mkdir -p ~/.claude/skills && cp -r "$T/library/specializations/web-development/skills/web-security" ~/.claude/skills/a5c-ai-babysitter-web-security && rm -rf "$T"
manifest: library/specializations/web-development/skills/web-security/SKILL.md
source content

Web Security Skill

Expert assistance for web application security.

Capabilities

  • Implement security headers
  • Configure CSP
  • Prevent XSS/CSRF
  • Secure authentication
  • Handle sensitive data

Security Headers

// Next.js
const securityHeaders = [
  { key: 'X-DNS-Prefetch-Control', value: 'on' },
  { key: 'Strict-Transport-Security', value: 'max-age=63072000; includeSubDomains' },
  { key: 'X-XSS-Protection', value: '1; mode=block' },
  { key: 'X-Frame-Options', value: 'SAMEORIGIN' },
  { key: 'X-Content-Type-Options', value: 'nosniff' },
  { key: 'Referrer-Policy', value: 'origin-when-cross-origin' },
];

Target Processes

  • security-audit
  • security-implementation
  • owasp-compliance