From guidewire-pack
Guides Guidewire security implementation: OAuth2 JWTs, GCC API roles, Gosu secure coding, PII encryption, SAML SSO for Jutro. Activate on security queries.
How this skill is triggered — by the user, by Claude, or both
Slash command
/guidewire-pack:guidewire-security-basicsThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
OAuth2 with short-lived JWTs, API roles in GCC (assign per-endpoint permissions), Gosu security: use gw.api.system.server.ServerUtil for auth, never hardcode credentials in Gosu, encrypt PII in custom entities. SAML SSO for Jutro frontends.
OAuth2 with short-lived JWTs, API roles in GCC (assign per-endpoint permissions), Gosu security: use gw.api.system.server.ServerUtil for auth, never hardcode credentials in Gosu, encrypt PII in custom entities. SAML SSO for Jutro frontends.
For detailed implementation, see: implementation guide
npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin guidewire-packInstalls Guidewire Studio, configures OAuth2 auth for Cloud APIs via Guidewire Hub, and sets up JWT tokens for PolicyCenter, ClaimCenter, BillingCenter.
Provides guidance on app security: OWASP Top 10, auth/authz (OAuth2/OIDC/JWT/RBAC/ABAC), encryption, passkeys/WebAuthn, Zero Trust, SAST/DAST/SCA, WAF, SIEM, supply chain, compliance. For auth, sensitive data, reviews, architectures.
Analyzes authentication and authorization patterns (OAuth2, JWT, RBAC/ABAC, MFA), audits security posture against OWASP, and recommends improvements for token lifecycle, permission models, and multi-factor authentication.