security-best-practices

Detect project languages and frameworks to generate prioritized vulnerability reports.

779|80|Updated Jun 20, 2025
One-click install
npx skills add https://github.com/Haohao-end/openagent --skill security-best-practices-haohao-end
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/Haohao-end/openagent/tree/main/api/internal/core/skills/catalog/security-best-practices
Command: npx skills add https://github.com/Haohao-end/openagent --skill security-best-practices-haohao-end

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Security-best-practices guidance helps teams reduce common vulnerabilities by checking the languages and frameworks in their project context and applying secure-by-default recommendations.

Core Features & Use Cases

  • Framework-aware security review: Detects the relevant language and frameworks in scope to tailor guidance instead of using generic advice.
  • Secure-by-default code improvement: Produces safer implementation guidance to prevent major issues as you build or refactor.
  • Passive vulnerability detection & reporting: Flags critical risks and can generate a structured vulnerability report with prioritized severity for requested reviews.

Quick Start

Ask: "Run a security best-practices review for this codebase and suggest secure-by-default improvements for the languages and frameworks involved."

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a secure-by-default code review for my project's specific frameworks?

Secure-by-default code review works by detecting the active languages and frameworks in your project, loading relevant reference documentation, and applying tailored guidance to reduce vulnerabilities as you write or refactor code.

What is framework-aware vulnerability assessment and how does it differ from generic security checks?

Framework-aware vulnerability assessment identifies the specific languages and frameworks in your codebase to apply tailored secure coding guidance, rather than relying on generic security rules that may not address your stack's unique threat mitigation needs.

Can I generate a structured vulnerability report with prioritized severity for my codebase?

Yes, you can generate a structured vulnerability report by requesting a security review, which passively detects major issues and flags critical risks with prioritized severity levels for your specific tech stack.

Does this security review tool work with any programming language or framework?

Security review applies to any detected programming language or framework by loading relevant reference documentation when available, ensuring tailored secure coding guidance instead of generic advice.

What's the best way to implement threat mitigation during code refactoring?

The best way to implement threat mitigation during refactoring is to apply secure-by-default suggestions, which detect your active stack and provide safer implementation guidance to prevent major vulnerabilities proactively.