security

Identify and mitigate security risks using OWASP/NIST-aligned practices.

3|Updated Feb 25, 2026

Search Tags:#security #authentication #owasp #secrets #input-validation #nist

Ready to run

npx skills add https://github.com/Basilisk-Systems/claude-toolkit --skill security-basilisk-systems

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Basilisk-Systems/claude-toolkit/tree/main/skills/security
Command: npx skills add https://github.com/Basilisk-Systems/claude-toolkit --skill security-basilisk-systems

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security issues arise from mishandling secrets, insecure authentication, weak input validation, and insecure configurations across software lifecycles. This skill provides a comprehensive set of security best practices aligned with OWASP and NIST guidelines to help teams prevent common vulnerabilities and reduce risk.

Core Features & Use Cases

Secrets management and safe handling
Input validation, authentication/authorization, and secure data handling
Security headers, secure defaults, and dependency hygiene
Use Case: Integrate into code reviews and CI pipelines to catch vulnerabilities early

Quick Start

Review the guidelines and apply the practices in your project.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I apply OWASP security best practices to my codebase?▼

To apply OWASP security best practices, implement concrete controls for secrets management, input validation, safe password storage, secure session handling, and security headers across your codebase to prevent common vulnerabilities.

What is the best way to manage secrets and authentication in CI/CD pipelines?▼

The best way to manage secrets and authentication in CI/CD pipelines is to enforce OWASP and NIST-aligned security practices, applying concrete controls for safe secrets handling and secure session configuration during deployments.

How does input validation prevent API security vulnerabilities?▼

Input validation prevents API security vulnerabilities by enforcing strict data handling rules that block malformed or malicious payloads from reaching your application logic, aligning with NIST and OWASP mitigation strategies.

Can I use these NIST security guidelines across diverse programming languages and frameworks?▼

Yes, you can apply these NIST security guidelines across diverse programming languages and frameworks to prevent common vulnerabilities in codebases, CI/CD pipelines, cloud deployments, and API integrations.

When do I need to implement security headers and dependency hygiene?▼

You need to implement security headers and dependency hygiene during code reviews and CI pipeline integration to catch vulnerabilities early, enforce secure defaults, and reduce risk across the software lifecycle.

Why does insecure session handling cause authentication vulnerabilities?▼

Insecure session handling causes authentication vulnerabilities because it fails to enforce safe password storage and secure session controls, allowing attackers to bypass access restrictions outlined by OWASP and NIST guidelines.