security-best-practices

Security code review for Python, JavaScript/TypeScript, or Go projects is performed by loading framework-specific guidance from official references to validate inputs and enforce safe defaults. This surfaces actionable fixes and governance recommendations during the review process.

Secure-by-default coding best practices involve applying comprehensive, framework-specific guidance to languages like Python, JavaScript/TypeScript, and Go. This ensures safe defaults and input validation are consistently enforced across various software stacks during development tasks.

Yes, this security review guidance works with JavaScript and TypeScript frameworks, alongside Python and Go. It applies language-specific discovery metadata and consolidated references to generate structured payloads for validating secure defaults during code reviews.

Discovery metadata for security governance tooling is generated automatically from SKILL.md frontmatter and the references directory. This process consolidates framework-specific best-practices guidance into a structured metadata payload for downstream consumption.

Yes, you can use this to surface actionable vulnerability fixes during a security review. It provides comprehensive, framework-specific guidance that helps teams build safer software with minimal friction by validating inputs and recommending governance improvements.