skills.rest
Abrahan-Eagle
Abrahan-EagleCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security

Codifies OWASP-based patterns, secrets management, and security testing into project workflows.

Updated May 23, 2025
Search Tags:#authorization#security#authentication#owasp#input-validation#secrets-management
One-click install
npx skills add https://github.com/Abrahan-Eagle/zonix-eats-back --skill security-abrahan-eagle
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Abrahan-Eagle/zonix-eats-back/tree/main/.agents/skills/security
Command: npx skills add https://github.com/Abrahan-Eagle/zonix-eats-back --skill security-abrahan-eagle

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires detect-secrets, npm, safety.

What problem does it solve?

Security is often overlooked in software projects, leading to secrets leaks, misconfigurations, and weak testing. This Skill codifies OWASP patterns, secrets management, and security testing into project workflows.

Core Features & Use Cases

  • Defines required security setup such as .gitignore rules and environment validation.
  • Provides guidelines for secrets management, input validation, JWT/security headers, and automated security tests.
  • Includes sample CI workflows and pre-commit checks to enforce security across teams.

Quick Start

Follow the steps to integrate environment validation, pre-commit security checks, and a security workflow into your project.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate OWASP security patterns into my CI workflows?▼

You can integrate OWASP security patterns into CI workflows by codifying environment validation, pre-commit hooks, and automated security tests to enforce project-wide protection against misconfigurations and leaks.

What is the best way to prevent secrets from leaking in git repositories?▼

Preventing secrets leaks requires enforcing gitignore hygiene, applying secrets management guidelines, and using pre-commit checks with tools like detect-secrets to stop sensitive data from being committed.

How do I set up environment validation and input validation for web backends?▼

Setting up environment and input validation involves defining required security configurations and applying OWASP-based patterns to modern web backends, ensuring proper JWT usage and security headers.

Does this security testing approach work with both frontend apps and web backends?▼

Yes, this security testing approach applies to modern web backends and frontend apps across environments, providing guidelines for secrets management, code reviews, and automated security tests.

Can I use npm and safety to automate security checks in pre-commit hooks?▼

Yes, you can use npm and safety alongside detect-secrets to automate security checks, enforcing environment validation and secrets management within pre-commit hooks and CI workflows.

Why do I need automated security tests for environment validation and gitignore hygiene?▼

Automated security tests are needed to mitigate risks from overlooked security setups, ensuring gitignore hygiene and environment validation are consistently enforced across teams and environments.

Related Skills

Explore More Software Engineering Skills→
token-overflowtoken-overflow

validate-changes

Validate code changes against design documents, environment configs, and .gitignore.

Official
Intermediate
onesmartguyonesmartguy
2

secrets-management

Manage sensitive credentials securely across CI/CD pipelines and secret stores.

Community
Advanced
williabywilliaby

security

Automates security validation, vulnerability scanning, and compliance checks for development environments.

Community
Intermediate
mcj-codermcj-coder
1

static-analysis-security

Configure SAST tools, secrets detection, and vulnerability thresholds for CI pipelines.

Community
Advanced