security-best-practices

Apply security best practices across multi-language projects for secure-by-default code.

Updated Mar 24, 2026
One-click install
npx skills add https://github.com/pingqLIN/UniText --skill security-best-practices-pingqlin
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/pingqLIN/UniText/tree/main/runtime/skills/security-best-practices
Command: npx skills add https://github.com/pingqLIN/UniText --skill security-best-practices-pingqlin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Identify and apply security best practices across languages and runtimes to produce secure-by-default code and reliable vulnerability detection.

Core Features & Use Cases

Applied across multi-language projects (Go, JavaScript/Node, Python, Django, Next.js, FastAPI) for development, review, and runtime governance. It enforces guidance delivery via runtime projections, references, and templates, and supports strict input validation, security headers, CSRF protections, and safe default configurations.

Quick Start

Try a quick run: generate runtime projections for your codebase to surface actionable security recommendations.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I apply security best practices across multiple languages like Go, Python, and JavaScript?

You can apply security best practices across Go, Python, and JavaScript projects by generating runtime projections that deliver strict input validation, security headers, and CSRF protections, ensuring secure-by-default code across multi-language environments.

What are secure-by-default configurations for web frameworks like Django and Next.js?

Secure-by-default configurations for Django and Next.js include strict input validation, properly configured security headers, and built-in CSRF protections. These safe defaults are delivered via templates and runtime projections to provide reliable vulnerability detection during development and review.

Can I use this security guidance for runtime governance in a FastAPI backend?

Yes, you can use this security guidance for runtime governance in a FastAPI backend. It applies best practices across multi-language projects to produce secure-by-default code, enforcing strict input validation and safe default configurations specifically for your runtime environment.

How do I generate runtime projections to surface actionable security recommendations?

To generate runtime projections and surface actionable security recommendations, run the quick start process on your codebase. This analyzes your multi-language project to deliver security guidance, enforce strict input validation, and apply safe default configurations across your runtimes.

Does this approach support both development review and runtime governance for Node.js?

Yes, this approach supports both development review and runtime governance for Node.js. It identifies and applies security best practices across JavaScript runtimes to produce secure-by-default code, delivering vulnerability detection and security headers through projections and templates.