security-baseline

Provide OWASP-aware security rules and vulnerability patterns for codebases.

11|1|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/mindcockpit-ai/cognitive-core --skill security-baseline-mindcockpit-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-baseline
Source: https://github.com/mindcockpit-ai/cognitive-core/tree/main/core/skills/security-baseline
Command: npx skills add https://github.com/mindcockpit-ai/cognitive-core --skill security-baseline-mindcockpit-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Provide developers with built‑in security awareness, preventing common vulnerabilities by offering OWASP‑aligned rules and language‑specific best practices.

Core Features & Use Cases

  • Universal security rules such as no hard‑coded credentials, input validation, and least‑privilege.
  • Language‑specific guidance for Python, JavaScript/TypeScript, Go, Perl, Rust, Java, C#.
  • Integration with cognitive‑core hooks that enforce these rules during code generation and review.
  • Reference material covering OWASP LLM Top 10 coverage.

Quick Start

Request the security baseline skill to display the OWASP checklist for your project.

Frequently Asked Questions about security-baseline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for OWASP vulnerabilities during code review?

To prevent hard-coded credentials and unsafe queries, apply OWASP-aligned security rules that flag insecure coding patterns during generation and review. This enforces universal practices like input validation and least-privilege across your codebase.

What are the best secure coding guidelines for Python and JavaScript projects?

The best secure coding guidelines for Python and JavaScript provide language-specific best practices aligned with OWASP standards. They enforce universal security rules including input validation, least-privilege, and blocking unsafe queries during development.

Does this security baseline support Go and Java codebases?

Yes, this security baseline supports Go and Java codebases by delivering language-specific guidelines during coding sessions. It applies OWASP-aware security rules across languages including Python, JavaScript, TypeScript, Go, Rust, Java, and C#.

What is the OWASP LLM Top 10 checklist for secure software development?

The OWASP LLM Top 10 checklist provides reference material covering vulnerability patterns and security rules for software projects. It ensures insecure practices like missing input validation and hard-coded credentials are flagged and mitigated.

How do I prevent hard-coded credentials and unsafe queries in my code?

To prevent hard-coded credentials and unsafe queries, apply OWASP-aware security rules that flag insecure practices during code generation and review. This enforces universal rules including input validation and least-privilege across your codebase.