Security in Bitrix
SkillSecurityCSRF, XSS, SQLi, SSRF, JWT/JWK, access rights, encryption. Use when handling input or auditing security.
Available today. Use it from your connected AI after setup.
No other account needed.
Connect ahel once, and every AI you use reads what you have installed.
Then ask your AI: use the Security in Bitrix skill
What this skill tells your AI
The instructions your AI receives, as published by bxmaximum/bitrix-framework-skills in skills/bitrix-security/SKILL.md and read by ahel’s review.
Baseline: main 23.0+. Features newer than baseline are marked Since.
Progressive disclosure: open only the rule files that match the task. Do not read every rules/*.md.
How to use
- Identify the layer the task touches.
- Open the matching
rules/*.mdbelow. - Prefer framework-native Bitrix patterns over custom abstractions.
Choose a rule file
When to read rules/csrf-xss.md
Read rules/csrf-xss.md (CSRF and XSS) when the task involves:
- CSRF
- XSS and HTML Sanitization
- CSRF Details
When to read rules/sql-ssrf.md
Read rules/sql-ssrf.md (SQL injection and SSRF) when the task involves:
- SSRF
- SQL Injections
When to read rules/jwt-crypto-access.md
Read rules/jwt-crypto-access.md (JWT, crypto, access, cookies) when the task involves:
- JWT / JWK
- Access Rights
#[ActionAccess]/AccessCheckControllerInterface- Secure Cookies
- Value Encryption
- Miscellaneous
- Checklist
Checklist
- Opened only the rule file(s) needed for this task.
- Followed DI /
/local// security canons fromAGENTS.md.
Signals
- GitHub stars
- 31
- Forks
- 5
- Last commit
- Aug 2026
Advanced
- Catalog kind
- skill
- Gateway key
bitrix-security- Source
- github.com/bxmaximum/bitrix-framework-skills