Seguridad de Paperclip — aislamiento de tenencia, secretos, compuertas de aprobación, presupuestos duros, canal de adaptador firmado. Usar al auditar o endurecer Paperclip.
Scanned 9/5/2026
Install to Claude Code
Skills Directorynpx -y skills add TheBeardedBearSAS/claude-craft --skill security-paperclip --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Security Paperclip?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/thebeardedbearsas-security-paperclip-7341ef0d)More formats (shields.io, HTML) on the badges page.
---
name: security-paperclip
description: Seguridad de Paperclip — aislamiento de tenencia, secretos, compuertas de aprobación, presupuestos duros, canal de adaptador firmado. Usar al auditar o endurecer Paperclip.
---
# Seguridad de Paperclip
`companyId` solo desde sesión/path (nunca body del cliente); secretos cifrados en reposo + redactados en logs + resueltos vía `ctx.secrets.resolve(ref)` en plugins; compuertas de aprobación solo-servidor y solo-agregar; presupuestos son límites duros aplicados al dispatch; Better Auth para auth de operador con `BETTER_AUTH_SECRET` rotado; CSP/HSTS/COOP/CORP enviados en UI; capacidades de plugin declaradas mínimamente; `pnpm audit --audit-level=high` en CI.
Ver ../../rules/11-security-paperclip.md para documentación detallada.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...
