skills.rest
garethdaine
garethdaineCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-best-practices

Analyze codebases for security vulnerabilities and provide secure-by-default coding guidance.

Updated Feb 20, 2026
Search Tags:#code review#best practices#security#vulnerability#secure coding#penetration testing
One-click install
npx skills add https://github.com/garethdaine/agent --skill security-best-practices-garethdaine
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/garethdaine/agent/tree/main/.cursor/skills/security-best-practices
Command: npx skills add https://github.com/garethdaine/agent --skill security-best-practices-garethdaine

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you identify and fix security vulnerabilities in your code, ensuring your applications are built with security in mind from the start.

Core Features & Use Cases

  • Vulnerability Detection: Scans code for common security flaws across various languages and frameworks.
  • Secure-by-Default Guidance: Provides actionable advice and best practices for writing secure code.
  • Use Case: You're building a new web application and want to ensure you're following secure coding principles. This Skill can guide you through best practices for your chosen language and framework, flagging potential issues as you code.

Quick Start

Review the current project for security best practices and suggest improvements.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my codebase for security vulnerabilities in Python or JavaScript frameworks?▼

Secure coding practices prevent common web application flaws by detecting injection, authentication, and data exposure risks during development. This tool scans your codebase to provide actionable mitigation strategies and secure-by-default guidance across supported languages.

Can I use this to review code for secure coding best practices in Go and Express?▼

To fix security vulnerabilities, this tool analyzes your codebase and provides actionable advice for writing secure code. It targets flaws across languages and frameworks, focusing on mitigating risks related to injection, authentication, data exposure, and insecure configurations.

Does this vulnerability detection approach work with Vue.js and jQuery?▼

For vulnerability detection, prerequisites include having a codebase ready for analysis across supported languages like Python, JavaScript, and Go. You need source files from frameworks such as Django, FastAPI, Express, React, Next.js, Vue.js, or jQuery to scan.

What's the best way to mitigate injection and authentication risks during code review?▼

Following a vulnerability scan, next steps involve implementing the provided secure-by-default coding guidance to patch identified injection and authentication risks. You apply these actionable best practices to your Python, JavaScript, or Go codebase to secure your application.

Are there limitations when analyzing insecure configurations across multiple languages?▼

Complementary tools work in synergy within your tech stack to enhance secure coding workflows. These components provide additional penetration testing and code review functions, complementing vulnerability detection by validating security posture across your application infrastructure.

Related Skills

Explore More Software Engineering Skills→
igbuendigbuend
8

codeql

Perform interprocedural static analysis with CodeQL to detect security vulnerabilities and generate SARIF output.

Community
Advanced
lidge-junlidge-jun
5

security-best-practices

Review Go, JavaScript, and Python code for security vulnerabilities and fixes.

Community
Advanced
matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate