From patriotforge
Use when writing or reviewing security-sensitive code — authentication, payments, webhooks, input validation, secrets management, CORS/CSRF, file uploads, or audit logging.
npx claudepluginhub aka-kolton/patriotforge-claude-plugin --plugin patriotforgeThis skill uses the workspace's default tool permissions.
Enforce these rules on every code change. Flag violations as **CRITICAL**.
Implements Clean Architecture in Android and Kotlin Multiplatform projects: module layouts, dependency rules, UseCases, Repositories, domain models, and data layers with Room, SQLDelight, Ktor.
Enforces code quality on file edits via Plankton hooks: auto-formats, lints, Claude-powered fixes with model tiering, config protection, and legacy package manager blocks.
Enforces C++ Core Guidelines for writing, reviewing, and refactoring modern C++ code (C++17+), promoting RAII, immutability, type safety, and idiomatic practices.
Enforce these rules on every code change. Flag violations as CRITICAL.
session:{HMAC-SHA256(token, secret)} in Rediscompany_id + deleted_at IS NULLX-CSRF-Token header required on all state-changing requestshttps://forge.patriotpf.com only — no wildcardsOrigin header server-sideforge_app (least privilege); migrations: forge_migratedeleted_at) — NEVER hard deleteNUMERIC(12,2) — NEVER float.env in repo, no secrets in logsstripe-signature header)extra='forbid' on all request schemasX-CSRF-Token header on every mutation📖 Full details: docs/SECURITY_RULES.md, docs/plans/security-plan.md