ARCHETYPE
Pragmatist
A balanced, no-drama setup: some rules, some tools, nothing extreme.
Copy this rig
# review before running: this installs third-party code
$ npx degit Robotti-io/copilot-security-instructions/skills ./rig-copilot-security-instructions/skills MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit Robotti-io/copilot-security-instructions/.github/skills/markdown-customizations .claude/skills/markdown-customizations $ npx degit Robotti-io/copilot-security-instructions/plugins/copilot-security/skills/access-control-review .claude/skills/access-control-review $ npx degit Robotti-io/copilot-security-instructions/plugins/copilot-security/skills/dependency-cve-triage .claude/skills/dependency-cve-triage $ npx degit Robotti-io/copilot-security-instructions/plugins/copilot-security/skills/threat-model .claude/skills/threat-model $ npx degit Robotti-io/copilot-security-instructions/skills/genai-acceptance-review .claude/skills/genai-acceptance-review $ npx degit Robotti-io/copilot-security-instructions/skills/input-validation-hardening .claude/skills/input-validation-hardening $ npx degit Robotti-io/copilot-security-instructions/skills/secrets-and-logging-hygiene .claude/skills/secrets-and-logging-hygiene $ npx degit Robotti-io/copilot-security-instructions/skills/secure-code-review .claude/skills/secure-code-review $ npx degit Robotti-io/copilot-security-instructions/skills/secure-fix-validation .claude/skills/secure-fix-validation
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} Skills (9)
Similar rigs
manpreet171/slopguard
Security guardrails for vibe coding. Blocks insecure AI-generated code at the moment it's written - hardcoded secrets, SQL injection, hallucinated packages, and agent supply-chain attacks.
Minimalist 2.4k tok ·
tdiprima/claude-config
Claude Code dotfiles and bootstrap script to configure a new machine with rules, skills, and settings in one command.
Pragmatist 686 tok ·
anthropics/defending-code-reference-harness
Skills for threat modeling, scanning, triage, patching, plus an autonomous scanning harness you can /customize
Pragmatist 4.3k tok ·
686f6c61/alfred-dev
Tu equipo de desarrolladores en un plugin. 10 agentes, 11 skills planas, 18 comandos /alfred-dev:*. Memoria persistente, quality gates con evidencia y MCP local.
Skill Collector 3.1k tok ·