Open-source Claude Code skills to help EdTech companies ship faster & more securely.
Built by Madlen.io — from production experience building AI-powered educational tools, not theory.
EdTech companies handle some of the most sensitive data on the planet: student records, learning analytics, assessment results. Yet most security tooling is built for fintech or enterprise SaaS. These skills bring security-first thinking to education technology — covering compliance (FERPA, COPPA, GDPR, KVKK), student data protection, LLM safety, and secure shipping practices.
| Skill | Category | Purpose |
|---|---|---|
| differential-review | Code Auditing | Security-focused PR review with EdTech-specific threat modeling |
| student-data-audit | Data Protection | Scan for PII leaks, insecure storage of student data |
| llm-safety-review | AI Safety | Audit LLM integrations for prompt injection, data exfiltration, output safety |
| edtech-compliance | Compliance | FERPA, COPPA, GDPR, KVKK compliance checklist scanner |
| auth-flow-review | Authentication | Token handling, session management, RBAC review |
| api-surface-audit | API Security | Map exposed endpoints, check auth & rate-limiting |
| frontend-xss-audit | Frontend Security | React/Vue/Angular XSS vector detection |
| dependency-risk-check | Supply Chain | Audit deps for vulns, abandonment & license risks |
claude /install-skill https://github.com/madlenio/security-skillsClone this repo and point Claude Code to the skill you want:
git clone https://github.com/madlenio/security-skills.git
# Then reference skills from your .claude/settings.jsonEach skill follows a modular documentation architecture for token efficiency:
plugins/<skill-name>/
├── skills/<skill-name>/
│ ├── SKILL.md # Main prompt — entry point, decision tree, quick reference
│ ├── methodology.md # Detailed workflow phases
│ ├── patterns.md # Detection patterns and common findings
│ └── reporting.md # Output format and templates
├── commands/ # Slash command definitions
└── README.md # Human-readable overview
We welcome contributions! Whether you're an EdTech developer, security researcher, or educator:
- Fork the repo
- Create a skill following the structure above
- Test it on a real codebase
- Open a PR with before/after examples
See CONTRIBUTING.md for detailed guidelines.
Creative Commons Attribution-ShareAlike 4.0 International (CC BY-SA 4.0)
You're free to use, adapt, and share these skills — even commercially — as long as you give credit and share alike.
This project is inspired by Trail of Bits' skills repository — a pioneering collection of Claude Code security skills for code auditing, smart contract analysis, and vulnerability research. We adapted their skill structure and plugin architecture for the EdTech domain. Thank you to the Trail of Bits team for open-sourcing their work and showing the way.
Madlen.io is an AI-powered educational platform used by thousands of teachers. We build tools that make teaching smarter, not harder. This skills repository is our way of giving back to the EdTech community — helping everyone ship more securely.
Built with care by the Madlen team. Star the repo if you find it useful.