Help us improve
Share bugs, ideas, or general feedback.
From openevidence-pack
Provides OpenEvidence security basics including API key .env setup, checklists for rotation, auditing, and per-environment keys. Useful for secure SaaS API integrations.
npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin openevidence-packHow this skill is triggered — by the user, by Claude, or both
Slash command
/openevidence-pack:openevidence-security-basicsThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
```bash
Audits SaaS apps for vulnerabilities, implements authentication best practices with Supabase/Clerk/NextAuth, protects data via OWASP Top 10 checklists.
Provides OpenEvidence data classification, handling rules (caching, encryption, secrets), and compliance checklist for healthcare SaaS applications.
Discovers, classifies, protects, and governs API keys, tokens, secrets across code, git history, containers, CI/CD, VPS, and providers like OpenAI, AWS, GCP, Azure, Stripe. Enforces rotation, least privilege, and governance.
Share bugs, ideas, or general feedback.
# .env (never commit)
OPENEVIDENCE_API_KEY=your-key
# .gitignore: .env
See openevidence-prod-checklist.