Application Security Defense

Application Security Defense is an AI Engineering skill for Claude Code, published by telagod in code-abyss.

239 stars32 forkson telagod/code-abyssAdded 2026/09/03Repository updated 2026/07/19

agent-skillsai-agentai-assistantai-personalityblue-teamcharacter-cardclaude-codeclicodexcodex-cliconfigurationdeveloper-toolsdevopsgemini-clipersonaprompt-engineeringred-teamsecurityskills

Install in seconds

Install Application Security Defense

Copy Application Security Defense into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/telagod/code-abyss/tree/main/skills/defending-applications ~/.claude/skills/defending-applications

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/telagod/code-abyss.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/defending-applications/SKILL.md in telagod/code-abyss
Installs to: ~/.claude/skills/defending-applications
Collection: One of 25 skills cataloged from this repository
Category: AI Engineering — 2793 skills

What Application Security Defense does

Application Security Defense covers web, API, GraphQL, auth, and LLM application hardening. Use it when reviewing code, fixing CVE-class bugs, designing safer auth flows, or threat-modeling app-layer defenses.

Application Security Defense is cataloged under AI Engineering on DirSkills. Application Security Defense comes from a repository tagged agent-skills, ai-agent, ai-assistant, ai-personality and blue-team.

Documentation

README

Excerpt

应用安全防御 · 镇魔甲

判断先于执行：决定「是否做 / 选什么 / 如何取舍」（栈、方案、架构、权衡）前，先读领域判断内核 skills/_kernel/security/SKILL.md——它管 judgment，本秘典管 execution；冲突时以内核判断为准。

开发侧防御秘典：站在 builder 一侧，把漏洞挡在合并前。不教渗透，只教"如何写出杀不动的代码"和"如何把已生漏洞最小代价闭环"。信级：项目源码/lock 文件 > 框架官方安全文档 > CVE/CWE > 训练记忆（标 [unverified]）。

路由

意图	加载	触发词
Web/API/GraphQL 漏洞防御	web-api-appsec	XSS, SQLi, SSRF, BOLA, IDOR, Mass Assignment, GraphQL, 反序列化, 文件上传, 路径遍历, XXE, OWASP
认证授权与会话	oauth-and-sessions	OAuth, OIDC, JWT, SSO, SAML, Session, Cookie, PKCE, refresh token, kid 注入
LLM 应用安全	llm-appsec	Prompt 注入, 越狱, 越权调用, RAG 投毒, agent tool 滥用, 输出过滤, jailbreak

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Application Security Defense

What else does telagod publish alongside Application Security Defense?
Application Security Defense is one of 25 skills that DirSkills catalogs from telagod/code-abyss, the repository it ships in. Its siblings there include Adversarial Review Orchestration, Analyzing Changes and Analyzing Spreadsheets. Each one is a separate skill with its own page in this directory, installs the same way Application Security Defense does, and is maintained by telagod in that same repository. The rest of the collection is listed on the telagod/code-abyss page.
How does Application Security Defense compare to other AI Engineering skills?
Application Security Defense ranks #2413 by stars among the 2793 AI Engineering skills in this catalog. The most-starred ones next to it are Architecture Decision Records, AI-First Engineering and Agentic OS. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Application Security Defense against them. Open each page to compare what they document and how they install.