Security

Profiles

Ready-made CPO policy sets. Guardrails block what an agent must never do; quality and stack profiles hold generated code to your conventions. Set a profile by its id.

• Base security

  A Bash and Python workstation where Claude reads, edits and computes freely in the project, and the user confirms what destroys, leaves the project, reaches the network, persists or needs privileges, in Bash or in the Python it runs.

  Profile · base-security · 39 policies

• Secrets baseline

  Secrets stay out of the model's context and out of files, whatever the tool (Read, Grep, a shell); code from the internet is never piped into a shell.

  Profile · secrets-baseline · 5 policies