security-best-practices

Review codebases against OWASP Top 10 security best practices.

7|Updated Feb 5, 2026
One-click install
npx skills add https://github.com/Jonathan0823/opencode-config --skill security-best-practices-jonathan0823
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/Jonathan0823/opencode-config/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/Jonathan0823/opencode-config --skill security-best-practices-jonathan0823

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides structured security guidance to reduce vulnerabilities during development and deployment, aligning with OWASP Top 10 and secure coding patterns.

Core Features & Use Cases

  • OWASP Top 10 coverage: practical prevention guidelines and patterns across languages.
  • Secure coding patterns: language-agnostic techniques and checklists for authentication, input validation, secrets management, and secure configuration.
  • Code review & deployment guidance: actionable steps for securing APIs, headers, and security posture during development and CI/CD.

Quick Start

Use the security-best-practices checks to review a codebase against OWASP Top 10 and apply recommended security patterns.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I apply OWASP Top 10 secure coding patterns to my codebase?

To apply OWASP Top 10 secure coding patterns, use this Skill to run actionable checks against your codebase, reviewing authentication, input validation, and secrets management to reduce vulnerabilities during development and deployment.

What is the best way to implement secure authentication and input validation across different programming languages?

The best way to implement secure authentication and input validation is by applying language-agnostic techniques and checklists provided by this Skill, ensuring consistent vulnerability prevention across your entire codebase.

Can I integrate OWASP security checks into my CI/CD pipeline and code review workflows?

Yes, you can integrate OWASP security checks into CI/CD pipelines and code reviews by applying the practical templates and review workflows provided to assess API security, headers, and overall security posture during development.

Does this security guidance cover secrets management and secure configuration for APIs?

Yes, this security guidance covers secrets management and secure configuration for APIs, providing practical prevention guidelines and patterns to reduce vulnerabilities across languages during deployment.

How do I review my software for vulnerability prevention before deployment?

To review software for vulnerability prevention before deployment, use the Skill's structured security checklists to evaluate your code against OWASP Top 10 and apply recommended secure coding patterns directly in your assessments.