skills.rest
aviskaar
aviskaarOFFICIAL
Explore all skills by this author →
WebsiteGitHub

application-security

Design and implement application security programs across the software development lifecycle.

6|1|Updated Feb 20, 2026
Search Tags:#owasp#penetration testing#vulnerability management#appsec#api security#secure-sdlc
One-click install
npx skills add https://github.com/aviskaar/open-org --skill application-security-aviskaar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: application-security
Source: https://github.com/aviskaar/open-org/tree/main/skills/application-security
Command: npx skills add https://github.com/aviskaar/open-org --skill application-security-aviskaar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need to integrate robust security practices throughout the entire software development lifecycle, preventing vulnerabilities before they reach production.

Core Features & Use Cases

  • Secure SDLC Integration: Embeds security checks and processes from requirements to post-release.
  • Toolchain Standardization: Defines and enforces the use of SAST, SCA, and DAST tools.
  • Vulnerability Management: Establishes clear SLAs and processes for tracking and remediating vulnerabilities.
  • Use Case: Ensure that all new features undergo threat modeling, code is scanned for vulnerabilities before merging, and critical security bugs are fixed within 24 hours.

Quick Start

Use the application-security skill to design a secure SDLC for a new microservice.

Frequently Asked Questions about application-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate secure SDLC practices into my software development lifecycle?▼

Secure SDLC integration embeds security checks from requirements to post-release. You establish processes ensuring all new features undergo threat modeling and code is scanned for vulnerabilities before merging.

What is the best way to set up SAST, SCA, and DAST toolchain standardization?▼

Toolchain standardization defines and enforces the use of SAST, SCA, and DAST tools across your organization. This establishes release security gates to prevent vulnerabilities from reaching production.

How does vulnerability management work for tracking and remediating OWASP Top 10 issues?▼

Vulnerability management establishes clear SLAs and processes for tracking and remediating vulnerabilities. It enforces remediation programs ensuring critical security bugs are fixed within 24 hours.

Can I use this approach to design a secure SDLC for a new microservice?▼

Yes, you can design a secure SDLC for a new microservice. The skill designs comprehensive application security programs covering secure SDLC, toolchain setup, and OWASP Top 10 remediation.

What does API security enforcement involve within an application security program?▼

API security enforcement involves designing comprehensive application security programs that cover API security alongside secure SDLC integration. It enforces secure development practices across the organization.

When do I need vulnerability remediation programs with defined SLAs for my codebase?▼

You need vulnerability remediation programs with defined SLAs when establishing processes for tracking and remediating vulnerabilities. This ensures critical security bugs are fixed within 24 hours before release.

Related Skills

Explore More Software Engineering Skills→
zhangzhang-111-izhangzhang-111-i
2

env-secrets-manager

Scan repositories for environment variable and secret leaks.

Community
Intermediate
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
jaskaranhundaljaskaranhundal
3

sast-dast-coordinator

Orchestrate SAST, DAST, SCA, and secrets scanning tools to correlate and prioritize findings.

Community
Advanced
personamanagmentlayerpersonamanagmentlayer
41

security-expert

Guide application security with OWASP Top 10 mitigation and secure coding practices.

Official
Advanced