lightspeedwp-utils-security-instructions.ocm.json json Copy{
"ocm": "1",
"id": "lightspeedwp-utils-security-instructions",
"kind": "skill",
"name": "security",
"description": "Security Instructions",
"publisher": "lightspeedwp",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"skill-md",
"github-instructions"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Security Instructions"
],
"primary": false,
"metadata": {
"source": {
"provider": "github-instructions",
"repository": "https://github.com/lightspeedwp/utils",
"path": ".github/instructions/security.instructions.md",
"ref": "cd6f313161786a17f51718c94d58d65310f06e57",
"url": "https://github.com/lightspeedwp/utils/blob/cd6f313161786a17f51718c94d58d65310f06e57/.github/instructions/security.instructions.md",
"key": "lightspeedwp/utils/.github/instructions/security.instructions.md"
}
},
"instructions": "# Security Instructions\n\n## Basics\n\n- Escape on output (`esc_html`, `esc_attr`, etc.).\n- Sanitize on input; validate types and ranges.\n- Check capabilities; use nonces for state-changing requests.\n- Harden REST endpoints: permissions callbacks; minimal data exposure.",
"cost": {
"context_tokens": 66
}
}