Security Cards is an open-source security-guidance dataset + agent skill for 80+ libraries, to stop coding agents writing insecure code.
Yes, Security Cards is open source under the Apache-2.0 license.
Security Cards is free to use.
Yes, Security Cards can be self-hosted (the source is available under the Apache-2.0 license).
Open-source security-guidance dataset and installable agent skill (Astro site + data): targeted, version-aware security best practices for 80+ widely-used libraries across 13 languages, aimed at coding agents that write functionally-correct-but-insecure code. In the makers' BaxBench eval, wiring it into Claude Code (Opus 4.7) cut the insecure-code rate from 23.9% to 6.6%.