Forensify
alexgreensh/repo-forensics
Cross-agent self-inspection of your AI-agent stack. An agent skill from alexgreensh/repo-forensics.
Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response.
Install Together Security Basics
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install jeremylongshore/tons-of-skills-marketplace together-security-basics --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/.curated/together-security-basics .claude/skills/together-security-basics && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "together-security-basics" agent skill from https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basics into .claude/skills/together-security-basics/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "together-security-basics", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basicsType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install jeremylongshore/tons-of-skills-marketplace together-security-basics --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/.curated/together-security-basics .agents/skills/together-security-basics && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "together-security-basics" agent skill from https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basics into .agents/skills/together-security-basics/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "together-security-basics", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install jeremylongshore/tons-of-skills-marketplace together-security-basics --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/.curated/together-security-basics .cursor/skills/together-security-basics && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "together-security-basics" agent skill from https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basics into .cursor/skills/together-security-basics/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "together-security-basics", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/jeremylongshore/tons-of-skills-marketplace.git --path skills/.curated/together-security-basics--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install jeremylongshore/tons-of-skills-marketplace together-security-basics --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/.curated/together-security-basics .gemini/skills/together-security-basics && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "together-security-basics" agent skill from https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basics into .gemini/skills/together-security-basics/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "together-security-basics", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install jeremylongshore/tons-of-skills-marketplace together-security-basicsInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/.curated/together-security-basics .github/skills/together-security-basics && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "together-security-basics" agent skill from https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basics into .github/skills/together-security-basics/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "together-security-basics", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install jeremylongshore/tons-of-skills-marketplace together-security-basics --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/.curated/together-security-basics .opencode/skills/together-security-basics && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "together-security-basics" agent skill from https://github.com/jeremylongshore/tons-of-skills-marketplace/tree/main/skills/.curated/together-security-basics into .opencode/skills/together-security-basics/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "together-security-basics", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
together-security-basics- GitHub stars
- 2.8k
- Token cost
- ~1k tokens
- SKILL.md length
- 374 words
- Files
- 2 (incl. references)
- Skills in repo
- 3,342
- Repo updated
- First seen
- Licence
- MIT
At a glance
Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response.
- Works in 6 steps: Inventory keys, projects, callers,… → Remove tracked or client-side… → Minimize prompt/upload content, redact… → …
- Threat-modeling
- SKILL.md covers Overview, Prerequisites, Tool Discipline and Current Contract, plus 7 more sections
- Needs TOGETHER_API_KEY
What it does
Together Security Basics is an agent skill from jeremylongshore/tons-of-skills-marketplace. Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response. Use when threat-modeling or hardening Together usage. Trigger with "Together security", "protect Together API key", or "Together data controls".
Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/official-docs.md`). Compatibility notes: Designed for Claude Code; verification may require secret-store and Together AI project access
It sits in Security, covering Threat modeling and Incident response. It works with Together AI. The repository describes itself as: Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com. The licence is MIT.
When your agent uses it
- Threat-modeling
- Hardening Together usage
- With Together security
- Protect Together API key
Example prompts
- “Together security”
- “protect Together API key”
- “Together data controls”
- “/together-security-basics”
Requirements
- A credential in TOGETHER_API_KEY
- Compatibility (from SKILL.md): Designed for Claude Code; verification may require secret-store and Together AI project access
- Pre-approved tools (allowed-tools): Read, Glob, Grep, WebFetch, Write, Edit
Workflow steps
6 steps, taken from the first numbered list in SKILL.md.
- Inventory keys, projects, callers, endpoints, data classes, storage, and downstream actions.
- Remove tracked or client-side credentials and separate secrets by environment and workload.
- Minimize prompt/upload content, redact diagnostics, and enforce retention/deletion policy.
- Validate structured output and isolate any tool execution behind independent authorization.
- Bound tokens, concurrency, retries, batch/fine-tune submissions, and dedicated provisioning.
- Test credential revocation, provider failure, prompt injection, unsafe output, and incident response.
What it can do on your machine
Read from SKILL.md and the folder at commit cfae287. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves these tools, so the agent can use them without asking each time:
ReadGlobGrepWebFetchWriteEdit
From allowed-tools in the SKILL.md frontmatter.
Runs code
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
docs.together.ai
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names these keys or tokens, usually read from environment variables:
TOGETHER_API_KEY
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Compatibility
Designed for Claude Code; verification may require secret-store and Together AI project access
From compatibility in the SKILL.md frontmatter.
Context cost
Together Security Basics loads about 1k tokens when it runs, and up to ~1.8k if it reads all its reference files. Until then it costs about 88 tokens; SKILL.md has 374 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from jeremylongshore/tons-of-skills-marketplace at commit cfae287, republished under its MIT licence (© jeremylongshore). 374 words, ~1,026 tokens.
Download SKILL.mdSave it as
.claude/skills/together-security-basics/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.- name
- together-security-basics
- description
- Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response. Use when threat-modeling or hardening Together usage. Trigger with "Together security", "protect Together API key", or "Together data controls".
- allowed-tools
- Read, Glob, Grep, WebFetch, Write, Edit
- compatibility
- Designed for Claude Code; verification may require secret-store and Together AI project access
- argument-hint
- [repository-path] [environment] [data-classification]
- version
- 1.9.0
- author
- Jeremy Longshore <jeremy@intentsolutions.io>
- license
- MIT
- tags
- saas, together-ai, security
- model
- inherit
- effort
- high
Together AI Security Basics
Overview
This skill maps credentials, data, model output, tool use, logs, and paid asynchronous actions to explicit controls and owners.
Prerequisites
- Data classification and approved Together use cases
- Project/environment inventory and credential owners
- Request/response logging, retention, and deletion policy
- Model-output validation and any downstream tool-execution boundary
Tool Discipline
Use Read, Glob, and Grep to find provider calls, secrets, logging, persistence, and model-output consumers. Use WebFetch for current Together authentication and API behavior. Use Write or Edit only for approved controls; never read or reproduce secret values.
Current Contract
- Together keys are project-scoped; create separate development, CI, and production credentials.
- Keep keys server-side and out of source, browser bundles, prompts, logs, fixtures, and fork workflows.
- Treat prompts, uploaded files, outputs, model IDs, and job artifacts according to their data classification.
- Model output is untrusted input to downstream systems; validate structure and require authorization for side effects.
Authentication
Inject TOGETHER_API_KEY from an approved secret store and send it only as the SDK credential or Bearer header over HTTPS. Define rotation, revocation, leak detection, owner removal, and emergency shutdown procedures.
Instructions
- Inventory keys, projects, callers, endpoints, data classes, storage, and downstream actions.
- Remove tracked or client-side credentials and separate secrets by environment and workload.
- Minimize prompt/upload content, redact diagnostics, and enforce retention/deletion policy.
- Validate structured output and isolate any tool execution behind independent authorization.
- Bound tokens, concurrency, retries, batch/fine-tune submissions, and dedicated provisioning.
- Test credential revocation, provider failure, prompt injection, unsafe output, and incident response.
Show full SKILL.md (122 more words)Show less
Approval Boundaries
Do not upload sensitive datasets, enable model-driven side effects, broaden key sharing, or retain prompts/outputs beyond policy without the named data and security authorities.
Output
Return trust boundaries, key/project map, data-flow controls, output-validation rules, cost/side-effect bounds, test evidence, gaps, owners, and remediation deadlines.
Error Handling
| Condition | Response |
|---|---|
| Credential is exposed | Revoke or rotate immediately and scrub retained artifacts. |
| Data classification unknown | Stop before sending or uploading content. |
| Output fails validation | Reject it; do not coerce unsafe content into an action. |
| Provider access is abused | Disable the affected key/project path and preserve audit evidence. |
Examples
The example below shows the minimum redacted evidence expected from a successful invocation of this operator workflow.
keys=per-environment; prompts=minimized; outputs=untrusted-validated; side-effects=separately-authorizedResources
© jeremylongshore, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 1 other file (references) in skills/.curated/together-security-basics of jeremylongshore/tons-of-skills-marketplace.
- SKILL.md
- references/official-docs.md
Open the folder on GitHubat commit cfae287
Compare with similar skills
Together Security Basics next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Together Security Basics this skilljeremylongshore/tons-of-skills-marketplace | 2.8k | — | ~1k | Automated safety check: Pass | MIT | |
| Forensifyalexgreensh/repo-forensics | 190 | — | ~2.5k | Automated safety check: Notes | Custom licence | |
| Senior Securityalirezarezvani/claude-skills | 28k | — | ~1.3k | Automated safety check: Pass | MIT | |
| 007sickn33/agentic-awesome-skills | 47k | 2 repos | ~410 | Automated safety check: Pass | MIT | |
| Exposed Secret Rotationavelikiy/great_cto | 103 | — | ~884 | Automated safety check: Notes | MIT | |
| Security Setupluongnv89/skills | 131 | — | ~4.5k | Automated safety check: Pass | MIT |
Similar skills
Senior Security
alirezarezvani/claude-skills
A skill your agent uses when the user asks for STRIDE threat modeling, DREAD risk scoring, data-flow-diagram threat analysis, or a quick secret scan — or when a security request needs routing to the…
007
sickn33/agentic-awesome-skills
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
Exposed Secret Rotation
avelikiy/great_cto
Turns a leaked key, token or password into one tracked rotation task the moment it's spotted, instead of a reminder repeated every session.
Security Setup
luongnv89/skills
Install local-first security hardening: pre-commit secret detection, offline dependency scans, static analysis, reports, and gated free CI.
Hunting For Webshell Activity
mukul975/Anthropic-Cybersecurity-Skills
Runs a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing servers by analyzing file creation in web directories, suspicious child-process spawning from web server…
More from jeremylongshore/tons-of-skills-marketplace
All 3,342 skills in this repoPerforming Security Code Review
jeremylongshore/tons-of-skills-marketplace
Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin.
Adapting Transfer Learning Models
jeremylongshore/tons-of-skills-marketplace
Build this skill automates the adaptation of pre-trained machine learning models using transfer learning techniques.
Agent Context Loader
jeremylongshore/tons-of-skills-marketplace
Execute proactive auto-loading: automatically detects and loads agents.md files.
Aggregating Performance Metrics
jeremylongshore/tons-of-skills-marketplace
Aggregate and centralize performance metrics from applications, systems, databases, caches, and services.
Analyzing Capacity Planning
jeremylongshore/tons-of-skills-marketplace
Execute this skill enables AI assistant to analyze capacity requirements and plan for future growth.
Analyzing Database Indexes
jeremylongshore/tons-of-skills-marketplace
Process use when you need to work with database indexing. An agent skill from jeremylongshore/tons-of-skills-marketplace.
Related
Works with
Categories
Questions about Together Security Basics
What does Together Security Basics do?
Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response. Together Security Basics is an agent skill from jeremylongshore/tons-of-skills-marketplace. Secure Together AI integrations with project-scoped keys, environment isolation, prompt/output data controls, bounded model behavior, safe logging, rotation, and incident response.
When should I use Together Security Basics?
Together Security Basics fits situations like: threat-modeling; hardening Together usage; with Together security; protect Together API key.
How do I install Together Security Basics in Claude Code?
Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a claude-code`. Or copy the skill folder (skills/.curated/together-security-basics in jeremylongshore/tons-of-skills-marketplace) into .claude/skills/together-security-basics in your project. Claude Code loads it when a task matches its description.
How do I install Together Security Basics in Codex?
Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a codex`. Or copy the skill folder (skills/.curated/together-security-basics in jeremylongshore/tons-of-skills-marketplace) into .agents/skills/together-security-basics in your project. Codex loads it when a task matches its description.
Can I use Together Security Basics in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill together-security-basics -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/together-security-basics, .gemini/skills/together-security-basics, .github/skills/together-security-basics and .opencode/skills/together-security-basics in your project.
What does Together Security Basics need to run?
Going by SKILL.md and its folder, Together Security Basics needs credentials named TOGETHER_API_KEY. Our summary lists: A credential in TOGETHER_API_KEY. Its frontmatter pre-approves these tools: Read, Glob, Grep, WebFetch, Write, Edit. Compatibility (from SKILL.md): Designed for Claude Code; verification may require secret-store and Together AI project access.
Does Together Security Basics access the network?
SKILL.md names 1 domain. As links in the text: docs.together.ai. This is read from the text; nothing was executed.
Is Together Security Basics safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Together Security Basics use?
Together Security Basics is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Together Security Basics use?
About 1k tokens (SKILL.md is roughly 4.1k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 758 tokens, read only when the agent opens those files.
What are the alternatives to Together Security Basics?
Skills that share tags, products or a category with Together Security Basics: Forensify (alexgreensh/repo-forensics, 190 stars), Senior Security (alirezarezvani/claude-skills, 28k stars), 007 (sickn33/agentic-awesome-skills, 47k stars) and Exposed Secret Rotation (avelikiy/great_cto, 103 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Together Security Basics?
jeremylongshore (a GitHub user) maintains it in jeremylongshore/tons-of-skills-marketplace, which has 2,827 GitHub stars. The repository holds 3,342 skills in this directory. The repository was last updated on October 10, 2026.
Source: jeremylongshore/tons-of-skills-marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.