security-best-practices

Identify and apply security best practices across multi-language codebases.

Updated Mar 22, 2026
One-click install
npx skills add https://github.com/peteanderson80/skills --skill security-best-practices-peteanderson80
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/peteanderson80/skills/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/peteanderson80/skills --skill security-best-practices-peteanderson80

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This security skills library provides comprehensive, policy-driven guidance for identifying and remediating security issues across languages and frameworks, helping teams reduce risk.

Core Features & Use Cases

  • normative security rules and practical checks for major stacks (Go, Node.js, Python, Next.js/React/Vue, Django, FastAPI, and more) to guide both development and audits.
  • reference-driven workflows that load language-specific best practices and produce prioritized remediation plans with severity levels.
  • reusable templates for generation-time security checks and passive reviews that you can apply during code reviews or CI.

Quick Start

Inspect your codebase and apply the security best practices outlined in this skill to identify gaps and implement fixes.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I apply secure coding best practices across multiple languages like Go, Python, and Node.js?

To apply secure coding best practices across Go, Python, and Node.js, inspect your codebase against language-specific references that produce prioritized remediation steps and severity levels. This ensures safe defaults are established across different stacks.

What is a secure-by-default risk assessment for code and how does it work?

A secure-by-default risk assessment identifies security gaps by loading normative rules and practical checks for specific frameworks. It generates structured remediation plans and risk severities to help teams systematically reduce vulnerabilities.

Does this security guidance work with frontend frameworks like Next.js, React, and Vue?

Yes, this security guidance works with Next.js, React, and Vue by loading language-specific references tailored to those frameworks. It provides reusable templates for passive reviews and generation-time checks during development.

How do I integrate secure coding checks into my code review process?

You can integrate secure coding checks into code reviews using reusable templates that apply normative security rules to your stack. This identifies vulnerabilities and outputs structured remediation steps with assigned risk severities.

What is the best way to remediate identified web security vulnerabilities in my codebase?

The best way to remediate web security vulnerabilities is to use reference-driven workflows that produce prioritized remediation plans based on risk severity. This approach applies safe defaults and practical checks specific to your language.

Can I use these security patterns for both development and audits in Django and FastAPI?

Yes, you can use these security patterns for both development and audits in Django and FastAPI. The skill provides normative security rules and practical checks designed to guide secure implementation and audit processes.