Choose libraries from the catalog, or let the agent choose based on your context, then start with the matching security blueprints.
Use Security Cards with your AI tools
Install the skill, or share the agent usage guide directly. Security Cards helps your AI use guidance that matches the libraries in your project.
Install the AI skill
The skill shows your coding agents how to find and use the right Security Cards for your project. The agent usage guide explains the same workflow in a standalone file.
npx skills add Reware-Labs/securitycards --skill securitycards -gInstall for only this project
npx skills add Reware-Labs/securitycards --skill securitycardsUse the prompt with any coding agent
Let the agent check your project, or choose a library and version to make the prompt more specific.
No supported libraries found
Use the Security Cards skill for this task. Check the project's manifests and lockfiles to identify the libraries and versions in use. Find the most relevant Security Cards, apply their secure rules, verify the finished work with appropriate tests or checks, and include links to the cards you used.
Start with the skill or the agent guide
If the securitycards skill is installed, use it. Otherwise, open the agent usage guide for everything needed to work with Security Cards.
Use Security Cards when you are
Find focused guidance for the libraries and security topics involved in the change.
Compare existing code with the relevant secure rules and explain any concrete issues found.
How to use the cards
Check the versions used by the project, choose the most focused cards that fit the task, apply their secure rules, verify the result, and link to the cards used. If a project version is not supported, say so instead of using guidance for a different version.
The full list of supported libraries and cards is available in catalog.json.
Fetch the guide from the command line
curl https://securitycards.rewarelabs.com/agent-usage.mdMore ways to connectUseful files and URL patterns
- Agent usage guide
/agent-usage.mdSimple instructions an AI agent can follow. - JSON catalog
/catalog.jsonA structured list of supported libraries, versions, and cards. - Text catalog
/llms.txtThe same catalog in a text-friendly format. - Library bundle
/downloads/{language}/{library}/{version}.mdAll available cards for one library version. - Individual card
/downloads/{language}/{library}/{version}/{category}.mdGuidance for one focused security topic.