security-baseline

Installs and enforces security best practices for repositories.

3|Updated Jun 8, 2026
One-click install
npx skills add https://github.com/pax-k/pax-fullstack-harness --skill security-baseline-pax-k
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-baseline
Source: https://github.com/pax-k/pax-fullstack-harness/tree/main/skills/security-baseline
Command: npx skills add https://github.com/pax-k/pax-fullstack-harness --skill security-baseline-pax-k

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill ensures your repository has a strong security foundation, addressing common vulnerabilities and best practices.

Core Features & Use Cases

  • Secrets Protection: Safeguard sensitive information in environment files.
  • Secure Coding Conventions: Implement secure authentication, session handling, and input validation.
  • Security Checks: Perform vulnerability assessments and review security documentation.

Quick Start

Use the security-baseline skill to enforce a security review on your repository.

Frequently Asked Questions about security-baseline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce security best practices across my repository?

Secret management in development involves safeguarding sensitive information in environment files to prevent accidental exposure. This skill establishes conventions that protect secrets within your repository configuration and workflows.

What's the best way to protect secrets in environment files during development?

Secret management in development involves safeguarding sensitive information in environment files to prevent accidental exposure. This skill establishes conventions that protect secrets within your repository configuration and workflows.

How do I set up vulnerability scanning for a new project?

Vulnerability scanning can be set up by applying a security baseline that performs automated assessments on your repository. This skill runs security checks to identify common vulnerabilities and review existing security documentation.

Does this security baseline work with any repository or only specific frameworks?

This security baseline is applicable to any project requiring a baseline level of security compliance, rather than being tied to specific frameworks. It enforces general secure coding conventions and vulnerability checks across diverse repositories.

What secure coding conventions are enforced for authentication and session handling?

Secure coding conventions enforced include implementing secure authentication, proper session handling, and rigorous input validation. The skill establishes these standards to address common vulnerabilities directly within your development workflow.