security-best-practices

To audit your codebase for security best-practices, run this skill against your project to auto-detect languages and frameworks, mapping them to targeted guidance that produces a consolidated security health report with recommended fixes.

Yes, this security audit supports Python, JavaScript/TypeScript, and Go projects by auto-detecting the languages and applying framework-specific rules to generate actionable security recommendations.

The structured security health report classifies findings by severity, lists specific Findings IDs, details discovered dependencies and components used, and provides suggested fixes for your development team.

The skill applies framework-specific security rules by fetching targeted controls from its references directory, using that context to inform secure-by-default code recommendations for the detected frameworks.

Yes, you can use this for open-source security audits by running the skill against the codebase to analyze dependencies and generate prioritized, actionable guidance based on established best-practices.

The best way to get actionable security guidance for a multi-language codebase is to run this skill, which auto-detects Python, JavaScript/TypeScript, and Go frameworks to output a prioritized security health report.