skills.rest
shirulot
shirulotCOMMUNITY
Explore all skills by this author →
GitHub

security-best-practices

Review Go and JavaScript/TypeScript web applications for security vulnerabilities.

Updated Jul 6, 2026
Search Tags:#security#vulnerability#xss#secure coding#audit#go#express
One-click install
npx skills add https://github.com/shirulot/codex-skill --skill security-best-practices-shirulot
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/shirulot/codex-skill/tree/main/security-best-practices
Command: npx skills add https://github.com/shirulot/codex-skill --skill security-best-practices-shirulot

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the challenge of maintaining high security standards in software development by providing automated, context-aware security reviews and guidance for Go and JavaScript/TypeScript projects.

Core Features & Use Cases

  • Secure-by-Default Generation: Provides actionable guidance to write secure code from the start, preventing common vulnerabilities like SQL injection or XSS.
  • Passive Vulnerability Detection: Automatically flags critical security issues while you work, ensuring security is integrated into the development lifecycle.
  • Active Security Audits: Generates prioritized, severity-based vulnerability reports with clear remediation steps for existing codebases.

Quick Start

Trigger the security best practices skill to perform a comprehensive security audit of the current project and generate a prioritized vulnerability report.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a security audit for my Go web application?▼

To perform a security audit on your Go web application, trigger the review process to analyze your code against established security specifications, generating a prioritized vulnerability report with clear remediation steps.

Can I automatically detect XSS vulnerabilities in JavaScript and TypeScript projects?▼

Yes, you can automatically detect XSS vulnerabilities in JavaScript and TypeScript projects by performing passive vulnerability detection that flags critical security issues and provides secure-by-default coding improvements.

What is secure-by-default code generation and how does it prevent SQL injection?▼

Secure-by-default code generation provides actionable guidance to write secure code from the start, preventing common vulnerabilities like SQL injection by analyzing your code against established security specifications.

Does this security review process support both Go and Express frameworks?▼

Yes, the security review process supports both Go and JavaScript/TypeScript web applications like Express, analyzing code against established security specifications to identify vulnerabilities and suggest secure coding improvements.

How do I get a prioritized vulnerability report with remediation steps?▼

To get a prioritized vulnerability report with remediation steps, trigger an active security audit that analyzes your existing codebase and generates severity-based findings to fix identified vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
devendrapratapsinghdevendrapratapsingh
1

app-security

Scan application code for vulnerabilities and hardcoded secrets.

Community
Advanced
carlheathcarlheath
9

Security Specialist

Assess software and infrastructure security vulnerabilities and threats.

Community
Advanced
yldst-devyldst-dev
1

Vibe Security Skill

Guide AI-assisted secure coding for web applications to prevent XSS, CSRF, SQL Injection, SSRF, and access control flaws.

Community
Advanced
AnsteorraAnsteorra
6

security-audit

Perform static and dynamic security audits on the KMP application.

Official
Advanced