security-best-practices

Identify security best-practice references and generate metadata with remediation guidance.

Updated Feb 4, 2026
One-click install
npx skills add https://github.com/pchemguy/Dummy --skill security-best-practices-pchemguy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/pchemguy/Dummy/tree/main/docs/AgentSkills/openai/skills/skills/.curated/security-best-practices
Command: npx skills add https://github.com/pchemguy/Dummy --skill security-best-practices-pchemguy

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill consolidates official security best-practices across languages and frameworks, enabling teams to discover, cite, and apply proven security patterns during development and code reviews.

Core Features & Use Cases

  • Centralizes discovery of language/framework-specific security guidance from references, enabling consistent onboarding and review workflows.
  • Produces metadata for valid Skill units by loading and validating frontmatter, references, and operational instructions.
  • Supports integration with CI/CD prompts to generate secure-by-default code and remediation plans based on repository content.

Quick Start

Use the security-best-practices skill to identify applicable references for the project’s tech stack and generate a prioritized remediation plan.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify security best practices for my project's languages and frameworks?

Security best practices are identified by matching your project's languages and frameworks against official references, then producing a structured report with risk severity, evidence, and concrete patches aligned with CI/CD workflows.

What is a secure-by-default remediation plan for code review vulnerabilities?

A secure-by-default remediation plan provides concrete, minimal patches and configuration changes to fix vulnerabilities, prioritizing guidance based on risk severity to ensure production-safety requirements are met during code reviews.

How do I generate security best-practices metadata for valid skill units?

Generate security best-practices metadata by loading and validating frontmatter, references, and operational instructions to produce a structured report that includes evidence, risk severity, and remediation guidance for each valid skill unit found.

Can I integrate security best practices into CI/CD workflows for risk assessment?

Yes, you can integrate security best practices into CI/CD workflows to generate secure-by-default code and prioritized remediation plans based on repository content, ensuring continuous risk assessment and compliance alignment.

Does this security best-practices skill work without external dependencies?

Yes, the security best-practices skill operates without external dependencies, relying solely on its internal references component to consolidate official guidance and generate structured metadata reports for vulnerability remediation.

What's the best way to consolidate official security guidance across multiple frameworks?

The best way to consolidate official security guidance is to centralize discovery of language and framework-specific references, enabling consistent onboarding and review workflows while producing structured remediation metadata for each valid skill unit.