security-best-practices

Review Python, JavaScript/TypeScript, and Go code for security vulnerabilities.

Updated Mar 11, 2026
One-click install
npx skills add https://github.com/rafael-hc/AoPonto-FoodService --skill security-best-practices-rafael-hc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/rafael-hc/AoPonto-FoodService/tree/main/.agents/skills/security-best-practices
Command: npx skills add https://github.com/rafael-hc/AoPonto-FoodService --skill security-best-practices-rafael-hc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you write more secure code by providing language and framework-specific best practices, identifying vulnerabilities, and suggesting fixes.

Core Features & Use Cases

  • Secure Code Generation: Write code that follows security best practices from the start.
  • Vulnerability Detection: Passively identify and actively report security issues in your codebase.
  • Security Reports: Generate detailed reports on identified vulnerabilities with severity and suggested fixes.
  • Use Case: Review your Python Flask application for common security flaws like SQL injection or insecure session handling, and get actionable advice on how to fix them.

Quick Start

Review the security best practices for the current project's Python code.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my Python code for security vulnerabilities?

Identify Python security vulnerabilities using language-specific best practices to detect risks like SQL injection and insecure session handling, providing detailed reports with severity ratings and actionable fixes. It focuses on secure-by-default coding for Python, JavaScript, and Go.

Can I use this for general code reviews on my JavaScript project?

No, this Skill excludes general code reviews and non-security tasks for JavaScript projects. It specifically provides security best-practice reviews, vulnerability detection, and secure-by-default coding suggestions for JavaScript and TypeScript frameworks.

What's the best way to generate a security report for my Go application?

Generate a security report for your Go application by requesting a security review, which produces detailed findings on identified vulnerabilities including severity and suggested fixes. It applies Go-specific secure-by-default coding practices and vulnerability detection.

Does this tool detect SQL injection in Flask applications?

Yes, it detects SQL injection in Flask applications by applying Python framework-specific security best practices. It passively identifies and actively reports common security flaws, offering actionable advice and fixes to secure your codebase.

When should I not use this security review approach?

Avoid this security review approach for general code review or non-security tasks. It is specifically designed for security guidance, vulnerability identification, and secure-by-default coding assistance in Python, JavaScript/TypeScript, and Go.