security-best-practices

Analyze code for XSS, SQL injection, and insecure configurations across web frameworks.

Updated Mar 14, 2026
One-click install
npx skills add https://github.com/Moliboy5000/.claude --skill security-best-practices-moliboy5000
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/Moliboy5000/.claude/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/Moliboy5000/.claude --skill security-best-practices-moliboy5000

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you identify and fix security vulnerabilities in your code, ensuring your applications are built with secure-by-default practices.

Core Features & Use Cases

  • Security Reviews: Analyzes code for common security flaws across various languages and frameworks.
  • Secure Coding Guidance: Provides actionable recommendations for writing more secure code.
  • Vulnerability Reporting: Generates detailed reports on identified security issues, prioritized by severity.
  • Use Case: You're building a new web application and want to ensure it follows best practices from the start. Use this Skill to get guidance on securing your backend (e.g., Go, Python/Django, Node.js/Express, Python/FastAPI, Python/Flask) and frontend (e.g., React, Vue, plain JS) code.

Quick Start

Use the security-best-practices skill to review the current project for security vulnerabilities.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my code for vulnerabilities like XSS and SQL injection?

To check code for vulnerabilities like XSS and SQL injection, you can analyze your project to identify common security flaws and receive specific remediation steps. This process reviews backend and frontend frameworks to ensure secure-by-default coding practices.

Can I get secure coding guidance for Python frameworks like Django and FastAPI?

Yes, you can get secure coding guidance for Python frameworks like Django, FastAPI, and Flask. The review provides actionable recommendations for writing more secure code and fixing vulnerabilities specific to these backend environments.

What is the best way to review a Node.js Express application for security flaws?

The best way to review a Node.js Express application for security flaws is to perform a comprehensive security analysis that targets insecure configurations and common vulnerabilities. This generates a detailed report prioritized by severity with specific remediation steps.

Does this security review process support frontend code in React and Vue?

Yes, this security review process supports frontend code in React, Vue, and vanilla JavaScript. It analyzes frontend frameworks for common security flaws and provides actionable recommendations to secure your client-side code.

How do I fix path traversal vulnerabilities identified during a code review?

To fix path traversal vulnerabilities identified during a code review, you should follow the specific remediation steps and secure-by-default coding guidance provided in the generated vulnerability report. These recommendations offer actionable fixes for your specific language or framework.

When do I need to analyze my project for insecure configurations?

You need to analyze your project for insecure configurations when building a new web application to ensure it follows security best practices from the start. This identifies common flaws across backend and frontend code before deployment.