security-best-practices

Name: security-best-practices
Availability: InStock
Author: Niels

Identify and enforce security best practices across codebases and configurations.

Updated Dec 27, 2018

Search Tags:#security #vulnerability #xss #best-practices #code-review #csrf #secure-by-default

Ready to run

npx skills add https://github.com/segersniels/dotfiles --skill security-best-practices-segersniels

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/segersniels/dotfiles/tree/main/.codex/skills/security-best-practices
Command: npx skills add https://github.com/segersniels/dotfiles --skill security-best-practices-segersniels

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

The security-best-practices skill provides a framework for consistently identifying and applying language- and framework-specific security guidelines across codebases, helping teams reduce vulnerabilities and align with established standards.

Core Features & Use Cases

Centralized guidance: maps languages and stacks to authoritative security references to guide secure implementation.
Workflow-driven: supports generation of secure-by-default code, passive vulnerability detection, and formal security reports with prioritized fixes.
Discoverability: relies on a mandatory SKILL.md entry point and a references directory for actionable, example-driven guidance.

Quick Start

Audit a codebase by loading the SKILL.md, consult the references for language-specific guidance, and generate a prioritized fixes report.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a multi-language codebase for security vulnerabilities?▼

To scan a multi-language codebase for security vulnerabilities, load the SKILL.md entry point and consult the references directory for language-specific guidance. The process outputs a security_best_practices_report with prioritized fixes for detected vulnerabilities across your repositories.

What is secure-by-default code generation and how does it apply to XSS and CSRF protection?▼

Secure-by-default code generation maps languages and frameworks to authoritative security references, applying standards consistently to prevent XSS and CSRF vulnerabilities. This framework guides secure implementation across codebases to reduce vulnerabilities and align with established security standards.

Can I enforce security best practices across different frameworks without external dependencies?▼

Yes, you can enforce security best practices across different frameworks without external dependencies. The skill operates independently with no dependencies, using a references directory to provide actionable, example-driven guidance for multi-language repositories.

How do I generate a formal security report with prioritized fixes for my codebase?▼

Generate a formal security report with prioritized fixes by loading the SKILL.md entry point, consulting the references directory for language-specific security guidance, and running the workflow. The output is a security_best_practices_report detailing detected vulnerabilities and prioritized fixes.

Does passive vulnerability detection work for code review in multi-language repositories?▼

Passive vulnerability detection works for code review in multi-language repositories by applying language- and framework-specific security guidelines. The workflow identifies vulnerabilities and generates a formal security report with prioritized fixes, supporting consistent code review standards.

What are the limitations of using centralized security guidance for codebases?▼

Centralized security guidance relies on a mandatory SKILL.md entry point and a references directory for guidance, requiring proper setup to function. It provides framework-specific standards but depends on accurate reference mapping to effectively reduce vulnerabilities across diverse codebases.