security-best-practices

Analyze Python, JavaScript/TypeScript, and Go codebases for security best practices.

Updated Mar 17, 2026
One-click install
npx skills add https://github.com/Estom/aiflex --skill security-best-practices-estom
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/Estom/aiflex/tree/main/skills-repo/openai-skills/security-best-practices
Command: npx skills add https://github.com/Estom/aiflex --skill security-best-practices-estom

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Perform language- and framework-specific security best-practice reviews and generate secure-by-default guidance. Triggered when requesting security guidance, reviews, or secure-by-default coding help. It covers Python, JavaScript/TypeScript, Go, and other stacks, and relies on a curated set of references.

Core Features & Use Cases

  • Auto-loads security references for languages/frameworks from the repository.
  • Analyzes codebases to surface actionable secure-by-default patterns and remediation steps.
  • Generates structured reports with evidence and prioritized fixes on user request.

Quick Start

Provide a comprehensive security best-practices review for a given codebase and return a structured remediation report.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security audit for a Python or JavaScript codebase?

Yes, secure-by-default guidance covers Go alongside Python and JavaScript/TypeScript. The analysis targets language-specific security best practices across these stacks, surfacing actionable remediation steps and a reproducible checklist for secure deployment.

What is secure-by-default guidance for codebases?

Secure-by-default guidance identifies and applies language and framework security best practices directly within a codebase. It analyzes the target repository to surface actionable patterns, generating an evidence-backed remediation plan and a formal report with prioritized fixes.

How do I generate a security remediation plan with prioritized fixes?

You generate a security remediation plan by analyzing the codebase to identify vulnerabilities and applying secure-by-default patterns. The output is a structured formal report delivering findings with prioritized fixes and a reproducible checklist for secure deployment.

Can I use this for code review to find security best practices in existing repositories?

Yes, this performs language-specific security best-practice reviews during code review. It auto-loads security references from the repository, analyzes the codebase to surface actionable remediation steps, and generates structured reports with evidence upon request.

What limitations exist when applying security best practices across different programming languages?

Limitations depend on the curated set of references loaded for the specific languages and frameworks in scope. The analysis focuses strictly on Python, JavaScript/TypeScript, Go, and other supported stacks, generating evidence-backed findings rather than automated runtime fixes.