mcaf-security-baseline
About
This skill provides baseline security guidance for changes impacting authentication, data flow, or integrations without requiring a full AppSec review. It delivers concrete outputs like updated configs, docs, or verification steps for secrets handling and secure defaults. Use it when implementing features with security implications to embed guardrails and create reusable security context.
Quick Install
Claude Code
Recommendednpx skills add managedcode/MCAF -a claude-code/plugin add https://github.com/managedcode/MCAFgit clone https://github.com/managedcode/MCAF.git ~/.claude/skills/mcaf-security-baselineCopy and paste this command in Claude Code to install this skill
GitHub Repository
Frequently asked questions
What is the mcaf-security-baseline skill?
mcaf-security-baseline is a Claude Skill by managedcode. Skills package instructions and resources that Claude loads on demand, so Claude can perform mcaf-security-baseline-related tasks without extra prompting.
How do I install mcaf-security-baseline?
Use the install commands on this page: add mcaf-security-baseline to Claude Code as a plugin, or clone its repository into your skills directory, then restart Claude so it picks up the skill.
What category does mcaf-security-baseline belong to?
mcaf-security-baseline is in the Design category, tagged design and data.
Is mcaf-security-baseline free to use?
Yes. mcaf-security-baseline is listed on AIMCP and free to install. It runs inside Claude, so no separate service account is required to use the skill itself.
Related Skills
Use the executing-plans skill when you have a complete implementation plan to execute in controlled batches with review checkpoints. It loads and critically reviews the plan, then executes tasks in small batches (default 3 tasks) while reporting progress between each batch for architect review. This ensures systematic implementation with built-in quality control checkpoints.
This skill dispatches a code-reviewer subagent to analyze code changes against requirements before proceeding. It should be used after completing tasks, implementing major features, or before merging to main. The review helps catch issues early by comparing the current implementation with the original plan.
This skill provides a comprehensive guide for developers to connect MCP servers to Claude Code using HTTP, stdio, or SSE transports. It covers installation, configuration, authentication, and security for integrating external services like GitHub, Notion, and custom APIs. Use it when setting up MCP integrations, configuring external tools, or working with Claude's Model Context Protocol.
This skill helps developers choose between Claude Code Web and CLI interfaces based on task analysis, then enables seamless session teleportation between these environments. It optimizes workflow by managing session state and context when switching between web, CLI, or mobile. Use it for complex projects requiring different tools at various stages.