security

Automate security guidance for authentication, authorization, and OWASP Top 10 remediation.

Updated Jan 26, 2026
One-click install
npx skills add https://github.com/Barryrn/saas-setup --skill security-barryrn
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Barryrn/saas-setup/tree/main/.claude/skills/security
Command: npx skills add https://github.com/Barryrn/saas-setup --skill security-barryrn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive guide to implementing secure authentication, authorization, and vulnerability prevention across modern applications, reducing risk and accelerating secure delivery.

Core Features & Use Cases

  • Authentication & Authorization Guidance: Best practices for JWTs, sessions, OAuth, RBAC, and ABAC.
  • OWASP Reference & Security Practices: Access to OWASP Top 10 coverage and secure design patterns.
  • Secrets & Encryption Guidance: Procedures for secrets management, encryption at rest/in transit, and secure key handling.

Quick Start

Example: Outline a secure login flow with JWTs, refresh tokens, and role-based access checks for a new service.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure authentication and authorization in my application?

Secure authentication and authorization guidance covers best practices for JWTs, sessions, OAuth, RBAC, and ABAC to reduce risk and accelerate delivery. It provides architecture and code review guidance for development teams.

What is the best way to remediate OWASP Top 10 vulnerabilities during code reviews?

OWASP Top 10 remediation is guided by a dedicated references checklist, providing secure design patterns and vulnerability prevention steps directly applicable during architecture and code reviews.

How do I manage secrets and encryption keys for deployments?

Secrets management and encryption guidance outlines procedures for handling keys, encrypting data at rest and in transit, and securing credentials across your deployment pipelines.

Does this security guidance require any specific frameworks or runtime dependencies?

No runtime dependencies are required. The guidance relies on frontmatter-driven discovery and a references checklist, making it applicable across modern applications without framework constraints.

Can I use this for setting up role-based access control in a new service?

Yes, you can outline secure login flows with JWTs, refresh tokens, and role-based access checks for new services, applying RBAC and ABAC best practices directly to your architecture.