redis-security
Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bind and protected-mode, firewall rules, and disabling dangerous commands. Use when deploying Redis to production, defining ACL users for an application, configuring TLS connections, locking down a Redis instance behind a firewall, or auditing a Redis deployment for security hardening.
Install
With your agent
Install OMGSkills skill "redis/agent-skills:skills/redis-security" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/redis/agent-skills /tmp/agent-skills && ln -s /tmp/agent-skills/skills/redis-security ~/.claude/skills/redis-securityFrom README
Redis Security Production hardening for Redis: authentication, ACL-based access control, and network exposure. Cover all three together — any one of them on its own leaves an exploitable gap. When to apply Deploying or reviewing a Redis instance destined for production. Setting up application credentials beyond a shared password. Auditing a Redis deployment against a security checklist. Receiving "Redis exposed to the internet" findings from a scanner. Always authenticate (and use TLS) Never run a production Redis without a password. Pair authentication with TLS so credentials and data aren't sent in clear text. If you can use ACL users (next section) instead of the single requirepass, do — requirepass is effectively the legacy "default user" shortcut. See references/auth.md. ACLs for least-privilege access The default user with a shared password is fine for development.
More from this repo
iris-development
Iris is Redis's umbrella for AI-focused products.
redis-clustering
Redis Cluster and replication guidance covering hash tags for multi-key operations, avoiding CROSSSLOT errors, and...
redis-connections
Redis client and connection guidance covering connection pooling, multiplexing, pipelining, client-side caching with...