security-best-practices

Secure-by-default code reviews apply official ecosystem guidance to Python, JavaScript/TypeScript, and Go codebases. The skill loads reference rules to identify vulnerabilities and generate a structured findings report with prioritized fixes and remediation guidance.

Identifying security best-practice gaps requires applying official threat modeling and code review guidance to your project. This skill articulates present risks, evaluates configurations, and outputs an auditable improvement plan based on loaded security references.

Yes, this security review approach supports Go, Python, and TypeScript. It applies tailored, language-specific guidance loaded from its references directory to detect vulnerabilities and minimize common security mistakes across these specific ecosystems.

Yes, you can generate a compliance report with prioritized fixes from a vulnerability assessment. The skill produces an auditable, priority-based improvement plan featuring risk severities and remediation guidance suitable for compliance checks.

Applying threat modeling to evaluate configurations involves checking code against established security best practices. This skill identifies risks, articulates gaps, and provides structured remediation guidance to drive secure-by-default development.