What problem does it solve? Writing secure code requires deep knowledge of each language and framework's specific pitfalls, and security issues often slip into codebases unnoticed until they become incidents. This Skill loads curated security specifications for your stack and uses them to write secure-by-default code, passively flag critical vulnerabilities, or produce a full prioritized security report. ## Core Features & Use Cases - Secure-by-default code generation: Automatically applies security best practices for detected languages and frameworks (Python, JavaScript/TypeScript, Go) when writing new code. - Passive vulnerability detection: Flags critical security issues in existing code while you work, focusing on high-impact findings like injection flaws, CSRF gaps, and insecure session handling. - Prioritized security reports: Generates a severity-organized markdown report with numeric finding IDs, line-number references, and impact statements, then offers to fix findings one at a time. - Use Case: Ask for a security review of your Express.js backend, and receive a report identifying missing CSRF protection, insecure cookie flags, and unbounded request body parsing, each with a safe minimal fix. ## Quick Start Ask the agent to perform a security best practices review of this project and write a prioritized vulnerability report.
