security-best-practices

Provide OWASP-based secure programming checklists for Go, Python, and TypeScript.

1|Updated Feb 20, 2026
One-click install
npx skills add https://github.com/lklimek/claudius --skill security-best-practices-lklimek
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/lklimek/claudius/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/lklimek/claudius --skill security-best-practices-lklimek

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides developers with comprehensive, actionable security checklists based on OWASP standards to prevent common vulnerabilities during code development and review.

Core Features & Use Cases

  • OWASP-based Guidance: Offers detailed security practices categorized by OWASP Top 10 (2021) vulnerabilities.
  • Reference Index: Links to relevant OWASP Cheat Sheets and ASVS (Application Security Verification Standard) chapters for in-depth understanding.
  • Language-Specific Patterns: Includes security patterns tailored for Go, Python, and TypeScript.
  • Use Case: When developing a new API endpoint, consult the "API Security" and "Injection" sections to ensure proper input validation, authentication, and output encoding are implemented.

Quick Start

Use the security-best-practices skill to review the OWASP Top 10 categories for secure coding.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I use OWASP secure coding checklists during code review?

Secure development checklists guide code review by mapping common vulnerabilities to OWASP Top 10 categories. They cover authentication, authorization, injection prevention, cryptographic failures, and security misconfigurations to systematically verify secure coding practices.

What secure development practices prevent injection vulnerabilities in Python?

Secure development practices for preventing injection vulnerabilities in Python include implementing proper input validation, parameterized queries, and output encoding. The Skill provides language-specific patterns referencing OWASP Cheat Sheets for detailed guidance on these coding practices.

Can I apply OWASP ASVS verification standards to API security development?

Yes, you can apply OWASP ASVS to API security development. The guidance references Application Security Verification Standard chapters alongside OWASP Cheat Sheets to verify proper input validation, authentication, and output encoding for API endpoints.

Does this secure coding checklist support Go and TypeScript patterns?

Yes, the secure coding checklist supports Go and TypeScript by providing language-specific security patterns. It includes tailored programming practices for these languages alongside Python, covering vulnerability prevention techniques mapped to OWASP categories.

What is the best way to prevent cryptographic failures and security misconfigurations in code?

The best way to prevent cryptographic failures and security misconfigurations is to follow OWASP-based secure programming checklists. They provide actionable practices for proper cryptographic implementation and configuration management during software development.