security-best-practices

Analyze Python, JavaScript/TypeScript, and Go codebases for security risks and remediation guidance.

3|1|Updated Mar 17, 2026
One-click install
npx skills add https://github.com/cogine-ai/cogine-dev-skillset --skill security-best-practices-cogine-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/cogine-ai/cogine-dev-skillset/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/cogine-ai/cogine-dev-skillset --skill security-best-practices-cogine-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

The Skill consolidates security best-practices guidance across Python, JavaScript/TypeScript, and Go, helping teams apply secure-by-default coding patterns and perform efficient security reviews.

Core Features & Use Cases

  • Load language-specific security references from the skill references to tailor guidance to the project's tech stack.
  • Generate secure-by-default code patterns, review workflows, and vulnerability-prone area checklists for teams working across multiple languages.
  • Produce structured risk reports and remediation plans that guide engineers from discovery to fixes in production-grade systems.

Quick Start

Analyze a codebase to identify insecure patterns and generate a prioritized security improvement plan.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security risks and insecure coding patterns across multiple languages?

To identify security risks across multiple languages, you analyze the codebase to detect insecure patterns and generate a prioritized security improvement plan. This applies secure-by-default coding guidance tailored to Python, JavaScript/TypeScript, and Go.

What are secure-by-default code patterns and how do they work for code review?

Secure-by-default code patterns are standardized templates that prevent common vulnerabilities during code review. They work by loading language-specific references to tailor guidance, generating checklists for vulnerability-prone areas, and proposing structured remediation plans for engineering teams.

How do I generate a structured risk report and remediation plan for Python and JavaScript?

To generate a structured risk report and remediation plan for Python and JavaScript, you load language-specific security references to analyze the codebase. This produces actionable fixes and prioritized guidance to resolve discovered weaknesses in production-grade systems.

Does this security analysis support Go, Python, and TypeScript codebases?

Yes, this security analysis supports Go, Python, and TypeScript codebases. It loads language-specific references to detect vulnerabilities, applies secure-by-default coding patterns, and provides structured remediation guidance tailored to your project's specific tech stack.

What is the best way to automate vulnerability detection across a multi-language tech stack?

The best way to automate vulnerability detection across a multi-language tech stack is to analyze your codebase against consolidated security best-practices. This generates risk-focused reports with actionable fixes, covering Python, JavaScript/TypeScript, and Go within a unified review workflow.

When should I not rely solely on automated codebase security analysis?

You should not rely solely on automated codebase security analysis when addressing complex, context-dependent business logic flaws beyond standard insecure patterns. While it provides structured remediation plans for Python, JavaScript/TypeScript, and Go, deep architectural risks require manual risk-management review.