skills.rest
koki3141
koki3141COMMUNITY
Explore all skills by this author →
GitHub

security-best-practices

Review Python, JavaScript/TypeScript, and Go code for security vulnerabilities.

2|Updated Jul 9, 2026
Search Tags:#code review#best practices#security#vulnerability detection#improvement suggestions
One-click install
npx skills add https://github.com/koki3141/codex-global-skills --skill security-best-practices-koki3141
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/koki3141/codex-global-skills/tree/main/security-best-practices
Command: npx skills add https://github.com/koki3141/codex-global-skills --skill security-best-practices-koki3141

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the review of code for security best practices, identifying potential vulnerabilities and suggesting improvements to enhance code security.

Core Features & Use Cases

  • Security Best Practices Review: Identifies and suggests improvements for common security vulnerabilities in supported languages (Python, JavaScript/TypeScript, Go).
  • Vulnerability Detection: Passively detects vulnerabilities while working in the codebase.
  • Security Reporting: Generates a detailed security report with findings and recommendations.
  • Fixes: Offers to apply fixes for identified vulnerabilities.
  • Use Case: Imagine you have a Python project with multiple dependencies. Use this Skill to automatically review the code for common security vulnerabilities and generate a report with suggestions for improvement.

Quick Start

Use the security-best-practices skill to review the security of your code in the current context.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect SQL injection and XSS vulnerabilities in Python code?▼

Security best practice reviews detect SQL injection and XSS vulnerabilities in Python code by scanning the codebase against known vulnerability patterns. The review then generates a detailed report with findings and offers to apply fixes to enhance code security.

Can I automatically review JavaScript and Go code for security flaws?▼

Yes, automated security best practice reviews support JavaScript, TypeScript, and Go code to detect common vulnerabilities like CSRF. The process identifies security flaws and suggests improvements to enhance overall code security.

What is the best way to automate security reporting for a codebase?▼

The best way to automate security reporting is by performing a security best practice review on your codebase. This generates a detailed security report containing identified vulnerabilities and actionable recommendations to improve code security.

Does automated vulnerability detection work for CSRF prevention in web applications?▼

Automated vulnerability detection works for CSRF prevention by scanning supported language codebases for common security vulnerabilities. It identifies potential CSRF risks and offers to apply fixes to improve overall code security.

What are the limitations of automated code security reviews?▼

Automated code security reviews are limited to detecting common vulnerabilities in Python, JavaScript, TypeScript, and Go. They require access to relevant security references and scripts, and focus on known issues like SQL injection, XSS, and CSRF rather than complex logic flaws.

Related Skills

Explore More Software Engineering Skills→
rbkayzrbkayz

security-best-practices

Review Python, JavaScript/TypeScript, and Go code for security vulnerabilities.

Community
Advanced
lekemulalekemula

rails-security-audit

Scan Rails code for security vulnerabilities and report severity, location, and fixes.

Community
Intermediate
IndustrialIndustrial

code-reviewer

Analyze code for security vulnerabilities and performance issues.

Community
Advanced
lamb92009lamb92009

security-reviewer

Identify vulnerabilities in code, configurations, and infrastructure with prioritized remediation guidance.

Community
Advanced