Hi - I answer from the OpenSmartRoute documentation: routing, the API, plans and quotas, self-hosting. Ask away, or open a support ticket if you need a person.
Grounded in the docs - follow a source before acting on it.
security-baseline - Skill - OpenSmartRoute
Skillv1.0.0
security-baseline
Use when writing code that handles user input, external data, secrets, or authentication, to avoid common vulnerabilities.
Imported from JustinANelson/SKILL.MD (templates/skills/security-baseline/SKILL.md). Install upstream with npx skills add JustinANelson/SKILL.MD --skill security-baseline. Copyright stays with the author.
Security Baseline
Validate and sanitize input at system boundaries - user input, file uploads, API responses.
Never hardcode secrets, API keys, or credentials in source files.
Use parameterized queries instead of building SQL or shell commands from raw strings.
Escape output that will be rendered as HTML to avoid injection.
Flag any place where you notice existing insecure code, even if it is outside the current task.
Use it
Copy one of these into your project. Installing also returns the manifest and these snippets.
# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot
curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'
Manifest
An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.
{
"ocm": "1",
"id": "justinanelson-skill-md-security-baseline",
"kind": "skill",
"name": "security-baseline",
"description": "Use when writing code that handles user input, external data, secrets, or authentication, to avoid common vulnerabilities.",
"publisher": "JustinANelson",
"version": "1.0.0",
"capabilities": {
"domains": [
"coding"
],
"tags": [
"skill-md",
"github"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Use when writing code that handles user input, external data, secrets, or authentication, to avoid common vulnerabilities."
],
"primary": false,
"metadata": {
"source": {
"provider": "github",
"repository": "https://github.com/JustinANelson/SKILL.MD",
"path": "templates/skills/security-baseline/SKILL.md",
"ref": "47fda2462a17e55acb09b0b53e2bf0c79830f9a6",
"url": "https://github.com/JustinANelson/SKILL.MD/blob/47fda2462a17e55acb09b0b53e2bf0c79830f9a6/templates/skills/security-baseline/SKILL.md",
"key": "JustinANelson/SKILL.MD/templates/skills/security-baseline/SKILL.md"
}
},
"instructions": "# Security Baseline\n\n- Validate and sanitize input at system boundaries - user input, file uploads, API responses.\n- Never hardcode secrets, API keys, or credentials in source files.\n- Use parameterized queries instead of building SQL or shell commands from raw strings.\n- Escape output that will be rendered as HTML to avoid injection.\n- Flag any place where you notice existing insecure code, even if it is outside the current task.",
"cost": {
"context_tokens": 108
}
}
Fetch it by URL: GET /api/v1/registry/justinanelson-skill-md-security-baseline/manifest?version=1.0.0
Reviews
Star ratings from people who tried it. One review per account; edit yours any time.
No reviews yet. Install it, try it, and be the first to rate it.
