security-best-practices

Enforce language-specific security best practices in code reviews.

Updated Feb 5, 2026
One-click install
npx skills add https://github.com/syl2042/codex_skills --skill security-best-practices-syl2042
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/syl2042/codex_skills/tree/main/security-best-practices
Command: npx skills add https://github.com/syl2042/codex_skills --skill security-best-practices-syl2042

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill guides teams to apply language- and framework-specific security best practices during reviews, surface gaps, and suggest concrete improvements to reduce risk.

Core Features & Use Cases

  • Load and apply security guidance from language-specific references (Python, JavaScript/TypeScript, Go) to real projects.
  • Identify security gaps in code reviews, perform vulnerability-focused analyses, and generate prioritized remediation plans.
  • Trigger on explicit requests for security guidance, security reviews, or secure-by-default coding help across multi-language codebases.

Quick Start

Invoke this skill to generate a secure-by-default review plan for a Python project.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce security best practices during a Python code review?

To enforce security best practices during a Python code review, apply language-specific secure coding guidance to identify vulnerabilities and generate prioritized remediation recommendations for risk mitigation.

What are secure-by-default coding practices for JavaScript and Go?

Secure-by-default coding practices for JavaScript and Go involve applying framework-specific security guidance during development to proactively surface gaps and suggest concrete improvements that reduce risk.

Can I use this for vulnerability hunts across multi-language codebases?

Yes, you can use this for vulnerability hunts across multi-language codebases to perform security reviews and identify framework-specific gaps in Python, JavaScript/TypeScript, and Go projects.

How do I generate a remediation plan for DevSecOps security gaps?

To generate a remediation plan for DevSecOps security gaps, trigger a security review to load relevant references, analyze the codebase for vulnerabilities, and produce prioritized remediation recommendations.

Does this security guidance work with both Go and TypeScript projects?

Yes, this security guidance works with Go and TypeScript projects by loading and applying language-specific references to perform structured vulnerability analyses and suggest secure coding improvements.