skills.rest
VSF-QC-TTS
VSF-QC-TTSOFFICIAL
Explore all skills by this author →
GitHub

common-security-standards

Enforces security protocols in software development across multiple programming languages.

Updated Jun 25, 2026
Search Tags:#authorization#security#authentication#input validation#encryption
One-click install
npx skills add https://github.com/VSF-QC-TTS/vf-qc-copilot --skill common-security-standards-vsf-qc-tts
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: common-security-standards
Source: https://github.com/VSF-QC-TTS/vf-qc-copilot/tree/main/.agents/skills/common/common-security-standards
Command: npx skills add https://github.com/VSF-QC-TTS/vf-qc-copilot --skill common-security-standards-vsf-qc-tts

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures that universal security protocols are applied to software development, safeguarding against common vulnerabilities and promoting secure coding practices.

Core Features & Use Cases

  • Universal Security Protocols: Implement authentication, encryption, authorization, input validation, and secret management.
  • Language Agnostic: Supports multiple programming languages including TypeScript, Java, Go, Dart, Java, Kotlin, Swift, and Python.
  • Workflow Integration: Seamlessly integrates into the software development workflow with minimal setup.
  • Use Case: Before merging any code, activate this Skill to validate and sanitize all external inputs, apply least privilege principles, and run SAST/DAST scans.

Quick Start

Before merging new code, run the 'common-security-standards' skill to validate security practices in the latest pull request.

Frequently Asked Questions about common-security-standards

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce secure coding practices before merging new code?▼

Enforcing secure coding practices before merging code requires validating external inputs, applying least privilege access, and running SAST/DAST scans. This ensures universal security protocols are actively applied to safeguard against common vulnerabilities.

What security protocols should I implement to safeguard application data?▼

Implementing authentication, encryption, authorization, input validation, and secret management safeguards application data. These universal security protocols prevent vulnerabilities and protect sensitive information across supported programming languages.

Does this security validation approach work with TypeScript, Go, and Python?▼

Yes, this security validation approach is language agnostic and works with TypeScript, Go, Python, Java, Kotlin, Swift, and Dart. It applies universal security protocols across diverse tech stacks without requiring language-specific setups.

How do I validate external inputs and manage secrets in software development?▼

Validating external inputs and managing secrets requires applying universal security protocols that sanitize data and enforce least privilege access. This prevents unauthorized access and protects against common vulnerabilities in your application.

When do I need to run SAST and DAST scans during software development?▼

Run SAST and DAST scans before merging any new code to identify vulnerabilities. Integrating these scans into your development workflow ensures continuous application of best practices and prevents security flaws from reaching production.

Related Skills

Explore More Software Engineering Skills→
mlvpatelmlvpatel
1

code-reaper

Identify and remediate security weaknesses in source code via static analysis.

Community
Advanced
I-OnlabsI-Onlabs
3

senior-secops

Run security scanner, vulnerability assessor, and compliance checker scripts with JSON reports.

Community
Advanced
Sir-chawakornSir-chawakorn
9

secrets-management

Detect hardcoded credentials and generate remediation plans for secure vault migration.

Community
Advanced
RangeyRoverRangeyRover
3

speckit.checker

Run static analysis across multiple languages and generate prioritized issue reports.

Community
Intermediate