security-best-practices

Review code for security vulnerabilities and provide best practice guidelines.

Updated Apr 27, 2026
One-click install
npx skills add https://github.com/luiztrilha/dunderia-public --skill security-best-practices-luiztrilha
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/luiztrilha/dunderia-public/tree/main/templates/local-runtime-profile/skills/codex/security-best-practices
Command: npx skills add https://github.com/luiztrilha/dunderia-public --skill security-best-practices-luiztrilha

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill ensures that your code follows best security practices for a variety of programming languages and frameworks, reducing the risk of security vulnerabilities.

Core Features & Use Cases

  • Language-Specific Security Guidelines: Provides guidelines for secure coding practices in languages like Go, JavaScript, and TypeScript.
  • Framework-Specific Security Best Practices: Offers security best practices for frameworks like Express.js and web applications.
  • Vulnerability Detection: Passive detection of security issues while coding.
  • Security Reports: Generates comprehensive security reports with detailed findings and suggested fixes.
  • Use Case: If you are developing a web application and want to ensure that it adheres to the latest security best practices, this skill can help you identify potential security vulnerabilities and provide guidance on how to fix them.

Quick Start

Run the security-best-practices skill and follow the guidelines for your language or framework.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review code for security vulnerabilities in Go and JavaScript?

Secure coding practices for web applications are enforced by reviewing your code against established guidelines for frameworks like Express.js. The skill identifies potential vulnerabilities during development and provides actionable best practice guidance to mitigate them.

Can I use this for vulnerability detection in TypeScript web frameworks?

Yes, you can use this for vulnerability detection in TypeScript web frameworks. It provides specific secure coding guidelines and best practices for both JavaScript and TypeScript, alongside general web application security checks.

How do I generate a security report with suggested fixes for my codebase?

You generate a security report by running the skill against your codebase, which triggers passive detection of security issues. It produces a detailed report outlining the identified vulnerabilities and providing recommended fixes based on best practices.

What are the best practices for securing Express.js applications?

Best practices for securing Express.js applications involve following framework-specific security guidelines provided by the skill. It reviews your web application code to detect common vulnerabilities and outputs targeted guidance to ensure secure coding standards are met.

Do I need external references to perform secure code reviews?

Yes, the skill requires analysis of code and external references to provide accurate security guidance and vulnerability detection. These references support the internal scripts that generate the comprehensive security findings and suggested fixes.