Guide secure coding and vulnerability identification in code reviews.
npx skills add https://github.com/booch/config_files --skill security-booch
Please help me install this Agent Skill. Skill: security Source: https://github.com/booch/config_files/tree/main/ai/skills/security Command: npx skills add https://github.com/booch/config_files --skill security-booch
This skill provides comprehensive guidelines to help developers write secure code and reviewers identify vulnerabilities during code reviews, reducing the risk of exploits.
Begin by applying the secure coding guidelines to your current project and identify at least three actionable improvements.
High-intent search queries and answers about installing and using this skill.
To find security vulnerabilities during a code review, apply OWASP-aligned checks and defensive design principles to identify weaknesses in authorization, input validation, and secure coding practices across web, mobile, or backend services.
Threat modeling is a proactive process to identify and mitigate potential security exploits during design. You need it during architecture and design reviews to guide defensive decisions and establish incident readiness before implementation begins.
Implement secure coding practices by applying comprehensive guidelines that address the OWASP Top 10, enforce input validation and authorization, and satisfy secure coding checklists across your development stack to reduce exploit risks.
Yes, this secure coding guidance applies to web, mobile, and backend services. It provides practical checks for common development stacks, ensuring defensive design and vulnerability mitigation across diverse platforms.
The best way to mitigate authorization and authentication vulnerabilities is to follow secure-by-default coding guidelines, apply input validation, and conduct thorough code reviews aligned with OWASP defensive design principles.
Secure coding checklists provide a baseline but do not replace proactive threat modeling. To fully mitigate vulnerabilities, you must combine checklist compliance with defensive design discussions during architecture reviews and continuous code review.
HechaoYannetGenerate a master architecture document from GDDs, ADRs, and governance constraints.
jayjpatel9717Scan network services and protocols for vulnerabilities and attack patterns.
pacphiIdentify and validate security vulnerabilities in software applications.
efiadmConfigure automated security scanning hooks with semgrep, bandit, and gitleaks.
