From openevidence-pack
Provides OpenEvidence security basics including API key .env setup, checklists for rotation, auditing, and per-environment keys. Useful for secure SaaS API integrations.
How this skill is triggered — by the user, by Claude, or both
Slash command
/openevidence-pack:openevidence-security-basicsThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
```bash
# .env (never commit)
OPENEVIDENCE_API_KEY=your-key
# .gitignore: .env
See openevidence-prod-checklist.
npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin openevidence-packAudits SaaS apps for vulnerabilities, implements authentication best practices with Supabase/Clerk/NextAuth, protects data via OWASP Top 10 checklists.
Provides OpenEvidence data classification, handling rules (caching, encryption, secrets), and compliance checklist for healthcare SaaS applications.
Discovers, classifies, protects, and governs API keys, tokens, secrets across code, git history, containers, CI/CD, VPS, and providers like OpenAI, AWS, GCP, Azure, Stripe. Enforces rotation, least privilege, and governance.