security-best-practices

Review Python, JavaScript/TypeScript, and Go code for security vulnerabilities.

Updated Feb 6, 2026
One-click install
npx skills add https://github.com/spandios/vibe-utils --skill security-best-practices-spandios
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/spandios/vibe-utils/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/spandios/vibe-utils --skill security-best-practices-spandios

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you identify and fix security vulnerabilities in your code, ensuring your applications are built with secure-by-default practices.

Core Features & Use Cases

  • Language/Framework Specific Reviews: Analyzes code for security best practices tailored to specific languages (Python, JavaScript/TypeScript, Go) and frameworks.
  • Vulnerability Detection: Passively identifies critical security issues and can generate detailed vulnerability reports upon request.
  • Secure Code Generation: Assists in writing new code that adheres to secure coding principles.
  • Use Case: Review a Python Flask application for common web vulnerabilities like SQL injection, XSS, and insecure session management, then receive actionable recommendations for remediation.

Quick Start

Use the security-best-practices skill to review the current Python Flask codebase for security vulnerabilities.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I review my Python Flask codebase for security vulnerabilities?

To review your Python Flask codebase for security vulnerabilities, you need an analysis tool that identifies injection flaws, XSS, and insecure session management. This Skill provides tailored security best-practice reviews and actionable remediation guidance for Flask applications.

What are common web security vulnerabilities in JavaScript frameworks like React and Node.js?

Common web security vulnerabilities in JavaScript frameworks include XSS, CSRF, SSRF, and authentication or authorization issues. This Skill analyzes JavaScript and TypeScript codebases, including Node.js, Express, React, and Next.js, to detect these flaws and suggest secure-by-default coding practices.

Can I check my Go application for insecure configurations and authorization issues?

Yes, you can check Go applications for insecure configurations and authorization issues. This Skill provides language-specific security reviews for Go, detecting common vulnerabilities and offering specific recommendations for securing your code.

How does secure-by-default coding prevent injection flaws in Python FastAPI applications?

Secure-by-default coding prevents injection flaws in Python FastAPI by enforcing secure coding principles during development. This Skill analyzes your FastAPI code to detect injection vulnerabilities and provides remediation guidance to ensure your application is built securely from the ground up.

Do I need to provide specific framework details to get a security best-practice review?

No, you do not need to provide specific framework details manually if your code context is clear. This Skill automatically applies security best practices tailored to specific languages and frameworks like Django, Vue, or Go based on your codebase.

Can I generate a detailed vulnerability report for my Node.js Express application?

Yes, you can generate a detailed vulnerability report for your Node.js Express application. This Skill passively identifies critical security issues and can generate detailed vulnerability reports upon request, complete with actionable recommendations for remediation.