Secure By Design — Agent Skill by Microsoft

From the author

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

— the description by Microsoft

Install

Get the skill from its source (we cannot redistribute it):
https://github.com/microsoft/hve-core/tree/f425e943bf228052a23e6bc4810b5faef030314f/.github/skills/security/secure-by-design

Documentation by Microsoft

The licence of this skill does not allow us to copy its documentation. Read it at the source

Files

SKILL.md(opens on GitHub)Not mirrored: opens on GitHub3.4 KiB
references/00-principle-index.md(opens on GitHub)Not mirrored: opens on GitHub5.0 KiB
references/01-security-governance.md(opens on GitHub)Not mirrored: opens on GitHub3.5 KiB
references/02-risk-driven-approach.md(opens on GitHub)Not mirrored: opens on GitHub3.4 KiB
references/03-secure-product-development.md(opens on GitHub)Not mirrored: opens on GitHub4.6 KiB
references/04-supply-chain-security.md(opens on GitHub)Not mirrored: opens on GitHub4.0 KiB
references/05-usable-security-controls.md(opens on GitHub)Not mirrored: opens on GitHub3.7 KiB
references/06-detect-and-respond.md(opens on GitHub)Not mirrored: opens on GitHub3.8 KiB
references/07-flexible-architecture.md(opens on GitHub)Not mirrored: opens on GitHub3.4 KiB
references/08-minimize-attack-surface.md(opens on GitHub)Not mirrored: opens on GitHub3.8 KiB
references/09-defense-in-depth.md(opens on GitHub)Not mirrored: opens on GitHub3.7 KiB
references/10-continuous-assurance.md(opens on GitHub)Not mirrored: opens on GitHub4.1 KiB
references/11-secure-deprecation.md(opens on GitHub)Not mirrored: opens on GitHub4.2 KiB

Requirements and compatibility

Written for: GitHub Copilot, Claude Code

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Claude Code frontmatter

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Security And Hardening
Addy Osmani· Community
A comprehensive framework for building secure, hardened web applications through threat modeling and defensive coding practices.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository113.9k
Claude Security
AnthropicOfficial
Claude Security: scan the codebase (the whole repository or a scoped part of it), scan changes (this branch's or a pull request's diff, or one commit), or suggest patches (findings turned into targeted patch files, each verified by a panel of agents, that you apply when you choose). Use when the user asks to scan, audit or check code with Claude Security, to scan their changes with Claude Security, or to fix or patch Claude Security findings.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
Link-onlyGitHub stars of the source repository46.3k
Mtls Configuration
Seth Hobson· Community
A comprehensive guide and template library for implementing mutual TLS (mTLS) to secure service-to-service communication in zero-trust environments.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Secrets Management
Seth Hobson· Community
A guide to implementing secure secrets management in CI/CD pipelines using industry-standard tools and best practices.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
K8s Security Policies
Seth Hobson· Community
A comprehensive guide for implementing production-grade security policies in Kubernetes clusters.
SecurityClaude CodeClaude appsOpenAI Codex+14 more
MITGitHub stars of the source repository42.3k
Jfrog Sec
GitHubOfficial
A specialized DevSecOps agent for automated security remediation using JFrog intelligence.
SecurityGitHub Copilot
MITGitHub stars of the source repository40.9k