Is the Security Awareness (Sage) skill free?

Yes. The skill itself is free from gendigitalinc/sage. SkillProof publishes the install command and an independent test verdict at no cost.

What is the Security Awareness (Sage) SkillProof Score?

7.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 4/5.

How do I install Security Awareness (Sage)?

Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.

Can I use Security Awareness (Sage) with Cursor, Copilot, Gemini CLI, Codex or other AI tools?

The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.

Security Awareness (Sage)

Security checklist for safe commands, URLs, secrets and supply chain

by gendigitalinc · gendigitalinc/sage

Works with setup

Install — copy the command Download source ↗

Test report

Verdict: Works with setup
Score: 7.6/10
Tested: Jul 17, 2026
Environment: Claude Code 2.x (agent harness)
Upstream re-checked: Aug 10, 2026 · 09bde81

Installed as a bare skill and pressure-tested it against a `curl | sudo bash` install request: its guidance matched what a security-conscious assistant already does by default, so it adds a tidy checklist but no measurable edge. The real-time protection that gives Sage teeth (package scanning, prompt-injection detection, session-start plugin scans) lives in the plugin's hooks and MCP server, which a standalone skill copy does not install.

Scored on four weighted criteria — install, triggering, output vs. baseline, docs. How scoring works

Installs cleanly 5/5
Triggers reliably 5/5
Output vs. baseline 5/10
Docs & honesty 4/5

What Security Awareness (Sage) does

A passive security-awareness skill that loads best practices for command execution, URL handling, credential storage, and supply-chain safety. Triggers when you evaluate shell commands, install scripts, package choices, or how to store secrets. It codifies a solid checklist, but the active scanning that gives Sage teeth lives in the full plugin (hooks + MCP server), not in this standalone skill file.

How to install Security Awareness (Sage)

git clone https://github.com/gendigitalinc/sage
mkdir -p ~/.claude/skills
cd sage && cp -r skills/security-awareness ~/.claude/skills/security-awareness

Skills live in ~/.claude/skills/ (global) or .claude/skills/ (per-project). Restart Claude Code after installing.

Commands — how to trigger Security Awareness (Sage)

/security-awareness Security checklist for safe commands, URLs, secrets and supply chain

It also activates on plain-language prompts like these:

Should I run this curl-pipe-to-sudo-bash install script from a random site?
Is it safe to store this API key in a plaintext config file?
Review this npm package before I add it to my project's dependencies.

Frequently asked questions

Is the Security Awareness (Sage) skill free?: Yes. The skill itself is free from gendigitalinc/sage. SkillProof publishes the install command and an independent test verdict at no cost.
Does Security Awareness (Sage) work with Claude Code?: We tested it with Claude Code 2.x (agent harness) on Jul 17, 2026. Verdict: Works with setup. Installed as a bare skill and pressure-tested it against a `curl | sudo bash` install request: its guidance matched what a security-conscious assistant already does by default, so it adds a tidy checklist but no measurable edge. The real-time protection that gives Sage teeth (package scanning, prompt-injection detection, session-start plugin scans) lives in the plugin's hooks and MCP server, which a standalone skill copy does not install.
What is the Security Awareness (Sage) SkillProof Score?: 7.6/10 — installs cleanly 5/5, triggers reliably 5/5, output vs. baseline 5/10, docs & honesty 4/5.
How do I install Security Awareness (Sage)?: Copy the install command from this page, run it in your terminal, and restart Claude Code. Skills live in ~/.claude/skills/ (global) or .claude/skills/ inside a project.
Can I use Security Awareness (Sage) with Cursor, Copilot, Gemini CLI, Codex or other AI tools?: The SKILL.md format is native to Claude (Claude Code, Desktop, claude.ai). The instructions inside adapt to other assistants: Cursor rules, GitHub Copilot instructions, Windsurf rules, Custom GPTs, AGENTS.md for OpenAI Codex, and GEMINI.md for Google Gemini CLI — our conversion guides cover each, and the free converter on the tools page does the wrapping for you.