skills.rest
createtree2017
createtree2017COMMUNITY
Explore all skills by this author →
GitHub

security-best-practices

Review codebases for security best practices and generate vulnerability reports.

Updated Mar 3, 2026
Search Tags:#secure coding#security review#code audit#language detection#secure-by-default#vulnerability report#framework hardening
One-click install
npx skills add https://github.com/createtree2017/createtree-office --skill security-best-practices-createtree2017
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/createtree2017/createtree-office/tree/main/.agents/skills/security-best-practices
Command: npx skills add https://github.com/createtree2017/createtree-office --skill security-best-practices-createtree2017

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you proactively identify security risks in code and frameworks, then apply secure-by-default improvements or produce an actionable security review when you explicitly ask for security guidance.

Core Features & Use Cases

  • Language & framework discovery: Detects the relevant primary languages/frameworks present in the current project context.
  • Reference-driven security guidance: Loads and applies security best practices from this Skill’s references/ documentation for the matched stack.
  • Three modes of operation: Generates secure-by-default changes, flags major issues during development, or produces a prioritized vulnerability report with suggested fixes when requested.

Quick Start

Ask for secure-by-default improvements by saying: "Review my current code for JavaScript/TypeScript or Express security best practices and suggest concrete fixes, but only for security issues."

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security review of my codebase?▼

A security review detects your project's languages and frameworks, then applies secure-by-default guidance and reference-driven rules to flag major issues and suggest concrete fixes for your codebase.

What are secure-by-default coding practices?▼

Secure-by-default coding proactively identifies security risks in your code and frameworks, applying reference-driven best practices to generate secure changes and actionable remediation recommendations.

How do I get a vulnerability report with suggested fixes?▼

To get a vulnerability report, explicitly request security guidance for your project. The review detects your tech stack, applies corresponding rules, and produces a prioritized vulnerability report with suggested fixes.

Can I use this for framework hardening on specific tech stacks?▼

Yes, it performs security best-practice reviews by detecting the relevant primary languages and frameworks present in your project context and applying corresponding secure-by-default guidance for framework hardening.

Does it work with unsupported languages for code audits?▼

No, it must avoid acting on unsupported or non-security requests. Security code audits operate only when explicitly triggered for security needs and consult reference documentation for evidence-based rules on supported stacks.

Related Skills

Explore More Software Engineering Skills→
Ankh-StudioAnkh-Studio

tech-stack-analyzer

Analyze a repository's technology stack using @specfy/stack-analyser to detect over 700 technologies.

Official
Intermediate
b0aseb0ase

security-audit

Audit codebases for vulnerabilities and generate prioritized fix plans with diffs.

Community
Advanced
IndustrialIndustrial

code-reviewer

Analyze code for security vulnerabilities and performance issues.

Community
Advanced
brainbrewlabsbrainbrewlabs
7

code-fixing

Fix code scanner, security auditor, and linter issues with verified edits and reports.

Official
Intermediate