security

Implement OWASP Top 10 prevention and automated security testing for software projects.

705|56|Updated Dec 26, 2025

Search Tags:#code review #security #vulnerability #input validation #owasp #secrets management

Ready to run

npx skills add https://github.com/alinaqi/claude-bootstrap --skill security-alinaqi

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/alinaqi/claude-bootstrap/tree/main/skills/security
Command: npx skills add https://github.com/alinaqi/claude-bootstrap --skill security-alinaqi

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security practices in software development, ensuring code is protected against common vulnerabilities and secrets are never exposed.

Core Features & Use Cases

Automated Security Checks: Integrates pre-commit hooks and GitHub Actions for continuous security scanning.
Secrets Management: Enforces best practices for handling environment variables and preventing secret leakage.
Input Validation: Provides guidance and examples for preventing common web vulnerabilities like SQL injection and XSS.
Use Case: A developer can use this skill to automatically scan their code for vulnerabilities before committing, ensuring that no sensitive information is accidentally included and that the code adheres to security best practices.

Quick Start

Run the security-check script in your project's root directory.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent OWASP Top 10 vulnerabilities like SQL injection and XSS in my code?▼

To prevent OWASP Top 10 vulnerabilities like SQL injection and XSS, this Skill enforces secure coding standards through automated pre-commit hooks, GitHub Actions workflows, and input validation schemas. It provides comprehensive scanning to secure code by default.

How do I set up automated security checks for my software project?▼

To set up automated security checks, run the security-check script in your project's root directory. This integrates pre-commit hooks and GitHub Actions workflows to continuously scan code for vulnerabilities and prevent secret leakage.

What is the best way to manage secrets and environment variables in development?▼

The best way to manage secrets and environment variables is using automated scanning to enforce best practices. This Skill prevents secret leakage by integrating checks into your development workflow before code is committed.

Can I use these security checks with my existing GitHub Actions workflows?▼

Yes, you can use these security checks with GitHub Actions workflows. The Skill integrates continuous security scanning directly into your existing GitHub Actions pipelines to enforce secure coding standards automatically.

Do I need any dependencies to run the security-check script?▼

No dependencies are required to run the security-check script. The Skill operates independently using its internal scripts and references to scan your project's root directory for vulnerabilities and exposed secrets.

How do I stop path traversal vulnerabilities in my web application?▼

To stop path traversal vulnerabilities, this Skill implements input validation schemas and automated security testing. It addresses path traversal alongside SQL injection and XSS through enforced secure coding standards.