菜单
Paperclip security — tenancy isolation, secrets, approval gates, hard budgets, signed adapter channel. Use when auditing or hardening Paperclip.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/TheBeardedBearSAS/claude-craft --skill security-paperclip命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
Règle 05 : Aggregates et Aggregate Roots. Use when defining a consistency boundary and its root entity, transaction scope, or invariants spanning multiple entities.
API Gateway patterns (Kong, Traefik, AWS API Gateway) — rate limiting, auth, routing, versioning. Use when implementing API gateway, reverse proxy, or API management.
Phase d'architecture systématique AVANT le code (TDD). Use when starting a new feature that touches multiple files, designing a new module, or making non-trivial architectural choices.
正在显示 SKILL.md
基于 SOC 职业分类
| name | security-paperclip |
| description | Paperclip security — tenancy isolation, secrets, approval gates, hard budgets, signed adapter channel. Use when auditing or hardening Paperclip. |
companyId from session/path only (never client body); secrets encrypted at rest + redacted in logs + resolved via ctx.secrets.resolve(ref) in plugins; approval gates server-only and append-only; budgets are hard limits enforced at dispatch; Better Auth for operator auth with a rotated BETTER_AUTH_SECRET; CSP/HSTS/COOP/CORP shipped on UI; plugin capabilities declared minimally; pnpm audit --audit-level=high in CI.
See ../../rules/11-security-paperclip.md for detailed documentation.
