security-best-practices

Security best practices review analyzes Python, JavaScript/TypeScript, and Go projects to identify insecure patterns, code gaps, and configuration vulnerabilities. It outputs structured findings with severity levels, locations, recommended fixes, and risk notes to produce a prioritized remediation plan.

Threat modeling and secure-by-default code review systematically surface security improvements across backend services, frontend apps, and deployment pipelines. This process identifies gaps in security coverage and generates actionable guidance to harden code, dependencies, and workflows.

Yes, security auditing applies across Python, JavaScript/TypeScript, and Go projects, including backend services, frontend apps, and deployment pipelines. It reviews language and framework security best practices to surface critical gaps and return prioritized remediation guidance.

Auditing deployment and configuration pipelines for vulnerabilities involves analyzing the codebase to identify insecure patterns and gaps in security best-practices coverage. The process generates prioritized remediation plans with structured findings, severity ratings, and recommended fixes for hardening workflows.

No external dependencies or tools are required to perform a security best practices audit. The skill loads guidance from its internal references directory and analyzes the codebase directly to output structured findings with severity, location, recommended fixes, and risk notes.