security-best-practices

Review Python, JavaScript/TypeScript, and Go code for security vulnerabilities.

4|Updated Feb 13, 2026
One-click install
npx skills add https://github.com/heyzude/skills_for_codex --skill security-best-practices-heyzude
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/heyzude/skills_for_codex/tree/main/skills_by_openai/security-best-practices
Command: npx skills add https://github.com/heyzude/skills_for_codex --skill security-best-practices-heyzude

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you identify and fix security vulnerabilities in your code, ensuring your applications are built with security best practices in mind.

Core Features & Use Cases

  • Security Reviews: Analyzes code for common security flaws and provides actionable recommendations.
  • Secure-by-Default Code: Guides you in writing new code that adheres to security best practices from the start.
  • Vulnerability Reporting: Generates detailed reports on identified security issues, prioritizing critical findings.
  • Use Case: You're building a new web service and want to ensure it's secure against common attacks. Use this Skill to review your code and get advice on implementing secure defaults for authentication, input validation, and data handling.

Quick Start

Review the current project for security best practices and suggest improvements.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my Python or Node.js code for security vulnerabilities?

To check code for security vulnerabilities, this Skill reviews Python, JavaScript/TypeScript, and Go codebases to identify common flaws like XSS, SQL injection, and CSRF. It generates detailed reports with actionable recommendations and fixes for your specific framework.

What is secure-by-default coding and how does it prevent path traversal?

Secure-by-default coding involves writing new code that adheres to security best practices from the start. This Skill provides framework-specific guidance to prevent vulnerabilities like path traversal and insecure configurations, ensuring your application is built securely against common attacks.

Does this security review tool support FastAPI and Next.js frameworks?

Yes, this security review tool supports FastAPI and Next.js, along with Django, Flask, Node.js, Express, React, Vue, and Go. It provides language and framework-specific security best-practice reviews tailored to your tech stack.

How do I generate a vulnerability report for my web service?

To generate a vulnerability report for your web service, use this Skill to analyze your project. It produces detailed reports on identified security issues, prioritizing critical findings and offering fixes for insecure authentication, input validation, and data handling.

What's the best way to fix SQL injection and CSRF issues in my application?

The best way to fix SQL injection and CSRF issues is to use this Skill for framework-specific secure coding guidance. It analyzes your code, identifies these exact vulnerabilities, and offers actionable fixes to implement secure defaults across Python, JavaScript, and Go environments.