nean-sec

Enforce OWASP Top 10 and CWE mitigations in NEAN apps.

3|1|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/edfenton/claude-skills --skill nean-sec
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: nean-sec
Source: https://github.com/edfenton/claude-skills/tree/main/nean/nean-sec
Command: npx skills add https://github.com/edfenton/claude-skills --skill nean-sec

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security policy alignment for NEAN apps ensures OWASP Top 10 and CWE mitigations are consistently applied, reducing security debt.

Core Features & Use Cases

  • Enforces a standardized security baseline across NEAN services including input validation, authorization checks, secure storage, and secure configuration.
  • Provides reference patterns and guidelines (e.g., parameterized queries, CSRF protection, rate limiting) to guide developers during implementation.
  • Use Case: when starting a NEAN project, import the policy baseline to automatically align code structure, DTOs, guards, and middleware with security best practices.

Quick Start

Review and integrate the NEAN security baseline into your codebase to start enforcing OWASP and CWE mitigations.

Frequently Asked Questions about nean-sec

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce OWASP Top 10 mitigations in a NestJS application?

You can enforce OWASP Top 10 mitigations in NestJS by integrating a security baseline that applies parameterized queries, secure token handling, and rate limiting across your API workflows. This ensures consistent guardrails for data handling and deployment.

What is the best way to prevent CSRF and establish secure configuration in NEAN apps?

The best way to prevent CSRF and establish secure configuration in NEAN apps is to import a standardized security policy baseline. This automatically aligns your code structure, DTOs, and middleware with CWE mitigations and secure storage practices.

How do I apply CWE mitigations and parameterized queries using TypeORM?

You apply CWE mitigations and parameterized queries using TypeORM by adopting reference patterns that enforce secure data handling. This establishes a standardized security baseline across your data workflows to reduce security debt.

Does this NEAN security baseline support automated input validation and authorization checks?

Yes, the NEAN security baseline supports automated input validation and authorization checks. Importing the policy baseline aligns your code structure and guards with these security controls to ensure consistent protection across services.

When do I need to apply OWASP and CWE security controls to my NestJS project?

You need to apply OWASP and CWE security controls when starting a NEAN project or reducing security debt. Importing the baseline early enforces secure token handling, rate limiting, and safe configuration across API, data, and deployment workflows.