Adds claude-code-security-checklist under 📚 Guides & Learning — a copy-paste security baseline to put in place before an agent gets access to a repo: permissions.deny entries, a gitleaks pre-commit hook, a prompt-injection rule for CLAUDE.md, and a read-only database URL pattern, with ready-to-copy config files in examples/.
It also documents two traps that make the setup look like it works when it doesn't: the standard AWS test key sits on the gitleaks allow-list, and .claude/settings.json only takes effect from the next session.
MIT licensed. Follows the existing list format.
Adds claude-code-security-checklist under 📚 Guides & Learning — a copy-paste security baseline to put in place before an agent gets access to a repo: permissions.deny entries, a gitleaks pre-commit hook, a prompt-injection rule for CLAUDE.md, and a read-only database URL pattern, with ready-to-copy config files in examples/.
It also documents two traps that make the setup look like it works when it doesn't: the standard AWS test key sits on the gitleaks allow-list, and .claude/settings.json only takes effect from the next session.
MIT licensed. Follows the existing list format.