skills.rest
viniciuscs84
viniciuscs84COMMUNITY
Explore all skills by this author →
Website𝕏@viniciuscs84GitHub

cybersecurity

Detects and prevents OWASP vulnerabilities in application code using security patterns and validation rules.

Updated May 22, 2026
Search Tags:#code review#security#authentication#vulnerability#sql injection#owasp#encryption
One-click install
npx skills add https://github.com/viniciuscs84/sdd-toolkit --skill cybersecurity-viniciuscs84
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cybersecurity
Source: https://github.com/viniciuscs84/sdd-toolkit/tree/main/skills/cybersecurity
Command: npx skills add https://github.com/viniciuscs84/sdd-toolkit --skill cybersecurity-viniciuscs84

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Applications ship with critical vulnerabilities like SQL injection, XSS, hardcoded secrets, and broken authentication because developers lack security expertise during design and code review. This Skill grounds security decisions in proven patterns, known failure modes, and concrete validation rules. ## Core Features & Use Cases - Secure Design Patterns: Apply defense in depth, least privilege, input validation boundaries, secure-by-default configuration, secrets management, and session security when building features. - Vulnerability Diagnosis: Identify and explain critical flaws such as SQL injection, XSS, CSRF, IDOR/BOLA, weak cryptography, broken sessions, and path traversal, with severity ratings and fixes. - Automated Code Review: Run regex-based validation rules that flag hardcoded secrets, dangerous eval usage, weak hashes (MD5/SHA1), insecure cookies, open redirects, CORS wildcards, and JWT 'none' algorithms. - Use Case: While implementing a login endpoint, consult the skill to hash passwords with bcrypt, rotate sessions after authentication, set HttpOnly/Secure/SameSite cookies, and verify no endpoint lacks authentication middleware. ## Quick Start Ask the AI to review your authentication and API endpoint code for OWASP vulnerabilities using the cybersecurity skill.

Frequently Asked Questions about cybersecurity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection in Node.js applications?▼

Always use parameterized queries instead of string concatenation, such as pool.query('SELECT * FROM users WHERE id = $1', [userId]). Add defense in depth with input validation and a least-privilege database user without DROP or GRANT permissions.

How should I store user passwords securely?▼

Hash passwords with bcrypt (12 rounds) or argon2id, never MD5, SHA1, or plain SHA-256. Verify logins with bcrypt.compare(). Assume your password table will be breached, so proper hashing is the last line of defense.

What is the difference between authentication and authorization vulnerabilities?▼

Authentication verifies who the user is, while authorization checks what they can access. Missing authorization causes IDOR/BOLA flaws where any authenticated user accesses others' resources; fix it by checking ownership on every request and scoping queries to req.user.id.

How do I fix a hardcoded secret already committed to git?▼

Rotate the credential immediately since git history is permanent and scanners find leaked keys in seconds. Move secrets to environment variables or a secrets manager, add .env to .gitignore, and use gitleaks as a pre-commit hook.

Why is client-side validation not enough for security?▼

Attackers bypass the browser entirely and call your API directly, so all client-side checks can be modified or skipped. Enforce authentication, authorization, and input validation on the server for every endpoint, treating the client as a UX layer only.

Related Skills

Explore More Software Engineering Skills→
rnavarychrnavarych
14

alpha-core:security-advisor

Advise on application security covering OWASP Top 10 and authentication patterns.

Community
Advanced
EstomEstom

security-reviewer

Performs security reviews of application code and infrastructure to identify vulnerabilities and remediation guidance.

Community
Advanced
michaelalbermichaelalber
2

dotnet-security-review

Review .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.

Community
Advanced
MonumentalSystemsMonumentalSystems
17

vulnerability-scanning

Scan application code, dependencies, and container images for security vulnerabilities.

Official
Advanced