// fetch failed
Couldn't render the SKILL.md content here right now. You can view the raw markdown or open the source folder on GitHub.
Generaltrailofbits
insecure-defaults
Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
- Stars
- 5,487
- Source
- trailofbits/skills
- Updated
- 2026-05-27
- Slug
- trailofbits--skills--insecure-defaults
// install — copy + paste into any project
mkdir -p .claude/skills && curl -fsSL https://raw.githubusercontent.com/trailofbits/skills/HEAD/plugins/insecure-defaults/skills/insecure-defaults/SKILL.md -o .claude/skills/insecure-defaults.mdDrops the SKILL.md into .claude/skills/insecure-defaults.md. Works with Claude Code, Cursor, and any agent that loads SKILL.md files from .claude/skills/.