skills.rest
marchatton
marchattonCOMMUNITY
Explore all skills by this author →
Website𝕏@marchattonhereGitHub

security-best-practices

Analyze code for injection flaws, insecure configurations, and improper authentication.

5|Updated Oct 22, 2025
Search Tags:#code review#best practices#security#vulnerability#secure coding#penetration testing
One-click install
npx skills add https://github.com/marchatton/agent-skills --skill security-best-practices-marchatton
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/marchatton/agent-skills/tree/main/.agents/skills/05-review/security/security-best-practices
Command: npx skills add https://github.com/marchatton/agent-skills --skill security-best-practices-marchatton

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you identify and fix security vulnerabilities in your code, ensuring your applications are robust against common threats and follow secure-by-default principles.

Core Features & Use Cases

  • Vulnerability Detection: Automatically scans code for known security anti-patterns and vulnerabilities.
  • Secure Code Generation: Provides guidance and examples for writing secure code from the start.
  • Security Best Practices: Offers recommendations tailored to specific languages and frameworks.
  • Use Case: When developing a new web application, use this Skill to ensure your backend code (e.g., Python/FastAPI, Node.js/Express) adheres to security best practices, preventing common issues like SQL injection, XSS, and insecure authentication.

Quick Start

Use the security best practices skill to review the current codebase for security vulnerabilities.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for security vulnerabilities automatically?▼

To scan code for security vulnerabilities automatically, use this Skill to analyze your codebase for injection flaws, insecure configurations, and improper authentication, providing actionable remediation steps and secure coding guidance.

Does this security review tool support Python FastAPI and Node.js Express frameworks?▼

Yes, this security review tool supports Python frameworks like Django and FastAPI, alongside JavaScript/TypeScript frameworks including Node.js/Express, React, Next.js, Vue.js, and Go.

What are the best practices to prevent SQL injection and XSS in web applications?▼

Best practices to prevent SQL injection and XSS involve applying secure-by-default coding principles during development, which this Skill enforces by detecting anti-patterns and providing tailored secure code generation guidance.

Can I get actionable remediation steps for insecure authentication configurations?▼

Yes, you can get actionable remediation steps for insecure authentication configurations by running this Skill, which analyzes your code and offers best practices tailored to your specific programming language and framework.

How do I ensure my backend code follows secure-by-default principles during development?▼

To ensure backend code follows secure-by-default principles, use this Skill to automatically review your codebase against known security anti-patterns and receive framework-specific secure code generation guidance.

Related Skills

Explore More Software Engineering Skills→
igbuendigbuend
8

codeql

Perform interprocedural static analysis with CodeQL to detect security vulnerabilities and generate SARIF output.

Community
Advanced
79yuuki79yuuki

pentest

Plan authorized penetration tests and generate assessment reports for web, API, and infrastructure targets.

Community
Advanced
devendrapratapsinghdevendrapratapsingh
1

app-security

Scan application code for vulnerabilities and hardcoded secrets.

Community
Advanced
Mentor-WizardMentor-Wizard
10

security-reviewer

Conduct security audits with SAST scans, vulnerability analysis, and penetration testing.

Official
Advanced