code-security

Audit code across multiple languages against OWASP and CWE security guidelines.

706|30|Updated Mar 13, 2023
One-click install
npx skills add https://github.com/wimpysworld/nix-config --skill code-security-wimpysworld
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-security
Source: https://github.com/wimpysworld/nix-config/tree/main/home-manager/_mixins/development/assistants/skills/code-security
Command: npx skills add https://github.com/wimpysworld/nix-config --skill code-security-wimpysworld

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security guidelines to help developers write and review secure code across languages, covering input handling, authentication, file operations, database queries, network requests, cryptography, and infrastructure configuration.

Core Features & Use Cases

  • Comprehensive, language-appropriate security rules for Python, JavaScript/TypeScript, Java, Go, Ruby, PHP, and C-like languages.
  • Guidance for secure coding during writing, reviewing, and code reviews, plus quick-start style prompts for practical adoption.
  • Reference material aligned with OWASP Top 10, CWE categories, and best-practice patterns for secure development.

Quick Start

Audit your current project against the secure coding guidelines and apply the top-priority checks for input handling and cryptography.

Frequently Asked Questions about code-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for OWASP Top 10 vulnerabilities across multiple programming languages?

Secure code review for OWASP Top 10 vulnerabilities across multiple languages is enforced by applying language-appropriate rules for input handling, cryptography, and database queries aligned with CWE categories. It provides comprehensive checks for Python, JavaScript, Java, Go, Ruby, and PHP.

What secure coding guidelines should I follow for Python and JavaScript?

Secure coding guidelines for Python and JavaScript should enforce safe patterns for input handling, authentication, and network requests. The guidance aligns with OWASP and CWE references to prevent common vulnerabilities during writing and reviewing.

How do I audit a project for secure coding best practices and input handling vulnerabilities?

Auditing a project for secure coding best practices involves checking input handling and cryptography against established guidelines. You can apply top-priority checks to identify and fix vulnerabilities in code and infrastructure configurations.

Does this secure coding guidance cover infrastructure configuration and CI/CD pipelines?

Yes, secure coding guidance covers infrastructure configuration and CI/CD pipelines. It extends to web services and databases, enforcing safe patterns and best practices across your entire development stack.

Can I use secure coding rules to prevent SQL injection and cryptography issues in Go and PHP?

Yes, you can use secure coding rules to prevent SQL injection and cryptography issues in Go and PHP. The guidelines provide language-appropriate checks for database queries and cryptographic operations aligned with CWE references.

What is the best way to implement secure authentication and file operations in Java and Ruby?

The best way to implement secure authentication and file operations in Java and Ruby is by following established secure coding guidelines. These rules enforce safe patterns and best practices for authentication and file handling to prevent vulnerabilities.