security-best-practices

Review Python, JavaScript/TypeScript, and Go code for security best practices.

Updated Mar 6, 2026
One-click install
npx skills add https://github.com/gooftroop/Armoury --skill security-best-practices-gooftroop
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/gooftroop/Armoury/tree/main/.opencode/skills/security-best-practices
Command: npx skills add https://github.com/gooftroop/Armoury --skill security-best-practices-gooftroop

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you identify and implement security best practices for your code, ensuring your applications are robust against common vulnerabilities.

Core Features & Use Cases

  • Language/Framework Specific Guidance: Provides tailored security advice for Python (Django, FastAPI), JavaScript (Express, React, Vue, jQuery), and Go.
  • Vulnerability Detection: Passively identifies and actively reports security weaknesses in your codebase.
  • Secure Code Generation: Helps write new code that follows secure-by-default principles.
  • Use Case: You're building a new web service in FastAPI and want to ensure it's secure from the start. This Skill will guide you on setting up authentication, input validation, and secure cookie handling.

Quick Start

Review the security best practices for Python Django applications.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my Python Django code for security vulnerabilities?

To review Python Django code for security vulnerabilities, request a security review and the Skill loads framework-specific references to identify weaknesses and suggest secure-by-default improvements like authentication and input validation.

What are the best practices for securing a FastAPI web service?

Securing a FastAPI web service involves applying best practices for authentication setup, input validation, and secure cookie handling, which the Skill provides through tailored Python framework-specific security guidance.

Can I use this for JavaScript frameworks like Express, React, and Vue?

Yes, you can use this for JavaScript frameworks like Express, React, Vue, and jQuery, as it provides tailored security advice, vulnerability detection, and secure code generation specifically for these environments.

How do I detect common security weaknesses in a Go codebase?

To detect security weaknesses in a Go codebase, trigger a security review and the Skill applies known best practices to passively identify and actively report vulnerabilities based on Go-specific documentation.

Does this Skill support secure code generation for new applications?

Yes, this Skill supports secure code generation by helping you write new code that follows secure-by-default principles, guided by language and framework-specific security documentation for Python, JavaScript, and Go.