skills.rest
MonumentalSystems
MonumentalSystemsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

secure-coding

Enforce OWASP-aligned secure coding practices for web APIs and sensitive operations.

17|5|Updated Feb 6, 2026
Search Tags:#authorization#authentication#input validation#owasp#secure coding#output encoding#secure api design
One-click install
npx skills add https://github.com/MonumentalSystems/Atlas-Agent-Teams --skill secure-coding-monumentalsystems
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-coding
Source: https://github.com/MonumentalSystems/Atlas-Agent-Teams/tree/main/teams/security/skills/secure-coding
Command: npx skills add https://github.com/MonumentalSystems/Atlas-Agent-Teams --skill secure-coding-monumentalsystems

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secure coding reduces vulnerabilities by preventing common flaws like injection, broken access control, and unsafe cryptography before they reach production.

Core Features & Use Cases

  • Input validation & output encoding to stop injection and context-based XSS by validating untrusted data and encoding it for the correct output context.
  • Authentication, authorization, and session security to enforce least privilege, RBAC/ABAC patterns, and secure session handling on every request.
  • Cryptography & secure API design to use vetted algorithms, proper key/TLS practices, and hardened endpoint behaviors (rate limiting, error handling, CSRF where applicable).

Use case: when implementing a new web API endpoint that accepts user input and returns user-generated content, apply these practices to mitigate injection, IDOR, and XSS risks while keeping authz decisions consistent.

Quick Start

Apply the secure-coding checklist to your API and code changes for authentication, authorization, validation, encoding, and crypto choices.

Frequently Asked Questions about secure-coding

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent injection and XSS vulnerabilities in my web API?▼

Prevent injection and XSS in your web API by validating untrusted input data and applying context-specific output encoding to ensure data is safely rendered for the correct output context.

What is the best way to enforce least privilege authorization for API requests?▼

The best way to enforce least privilege authorization for API requests is by implementing RBAC or ABAC patterns and applying strict authorization checks on every single request to prevent broken access control.

How does secure coding handle cryptography and TLS configuration?▼

Secure coding handles cryptography and TLS configuration by requiring vetted algorithms, proper key management practices, and hardened endpoint behaviors to protect sensitive operations across your application stack.

Do I need input validation for new endpoints returning user-generated content?▼

You need input validation for new endpoints returning user-generated content to mitigate injection, IDOR, and XSS risks while keeping authorization decisions consistent across the application.

What secure API design practices should I apply to protect sensitive operations?▼

Apply secure API design practices like rate limiting, hardened error handling, and CSRF protection where applicable to protect sensitive operations and prevent anti-patterns in your endpoints.

Related Skills

Explore More Legal & Compliance Skills→
gdurandvadasgdurandvadas
2

standards-security

Enforce OWASP Top 10 protections for authentication, input validation, and sensitive data handling.

Community
Intermediate
Fantasia1999Fantasia1999

senior-security

Perform STRIDE threat modeling and vulnerability analysis for security reviews.

Community
Advanced
alirezarezvanialirezarezvani
763

security-auditor

Detect OWASP Top 10 security vulnerabilities in code and configurations.

Community
Intermediate
utsavthakurutsavthakur

cmdi-command-injection

Identify and mitigate command injection vulnerabilities in software applications.

Community
Advanced