PerfectJob — Skill: Segurança

Establish security policies and practices for Spring Boot and React Native projects.

Updated Apr 26, 2026
One-click install
npx skills add https://github.com/Renzo-Tognella/UniversalThingsForMyAgents --skill perfectjob-skill-seguran-a
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: PerfectJob — Skill: Segurança
Source: https://github.com/Renzo-Tognella/UniversalThingsForMyAgents/tree/main/skills/security
Command: npx skills add https://github.com/Renzo-Tognella/UniversalThingsForMyAgents --skill perfectjob-skill-seguran-a

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires spring-boot, react-native, bcrypt, jwt, csp, hsts, frame-options, xss, csrf, rate-limiting, dependency-check, vault, owasp-zap, sonarqube, snyk, gitleaks, trivy, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This skill establishes security policies, practices, and standards for the PerfectJob project (Spring Boot + React Native), ensuring robust security measures are in place.

Core Features & Use Cases

  • Security Policies: Outlines fundamental security principles and threat models.
  • Backend Security: Provides guidance on authentication, authorization, input validation, SQL injection prevention, CORS configuration, rate limiting, security headers, secrets management, and dependency scanning.
  • Frontend Security: Offers recommendations for secure storage, input sanitization, deep link validation, certificate pinning, and network security.
  • Data Security: Ensures sensitive data is encrypted and protected during transmission and storage.
  • Monitoring & Incident Response: Implements alerting, audit logging, and incident response plans.
  • Security Checklist: Ensures new features adhere to security best practices.

Quick Start

To implement security measures for your PerfectJob project, follow the guidelines outlined in the PerfectJob — Skill: Segurança skill.

Frequently Asked Questions about PerfectJob — Skill: Segurança

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement authentication and authorization for a Spring Boot and React Native project?

Authentication and authorization for Spring Boot and React Native require JWT and bcrypt integration. The skill provides backend guidance on token validation and frontend secure storage practices to establish robust access control.

What security headers and policies do I need for React Native frontend protection?

Frontend security policies for React Native include CSP, HSTS, frame-options implementation, input sanitization, deep link validation, and certificate pinning. These measures protect against XSS attacks and ensure secure network communication.

How do I prevent SQL injection and configure CORS in a Spring Boot backend?

SQL injection prevention and CORS configuration in Spring Boot involve input validation, parameterized queries, and proper cross-origin policy setup. The skill outlines backend security practices including rate limiting and security headers.

Does this security skill cover secrets management and dependency scanning for Spring Boot?

Yes, secrets management uses Vault integration while dependency scanning leverages OWASP-ZAP, SonarQube, Snyk, Gitleaks, and Trivy. These tools identify vulnerabilities and protect sensitive credentials in Spring Boot projects.

What's the best way to set up incident response and audit logging for mobile app security?

Incident response and audit logging require alerting mechanisms and response plans integrated with backend monitoring. The skill defines security checklist practices ensuring new features adhere to protection standards.

How do I encrypt sensitive data during transmission and storage in a React Native app?

Data encryption during transmission and storage involves secure storage APIs, certificate pinning, and network security configurations. The skill establishes data protection policies ensuring sensitive information remains encrypted across both platforms.