skills.rest
fpindej
fpindejCOMMUNITY
Explore all skills by this author →
Website𝕏@fdpindejGitHub

Security Conventions

Document security conventions and provide a comprehensive application security checklist.

230|29|Updated Dec 25, 2025
Search Tags:#checklist#authorization#security#authentication#vulnerability#conventions#pii
One-click install
npx skills add https://github.com/fpindej/netrock --skill security-conventions
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Conventions
Source: https://github.com/fpindej/netrock/tree/main/.claude/skills/security-conventions
Command: npx skills add https://github.com/fpindej/netrock --skill security-conventions

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a comprehensive checklist and set of conventions to ensure the security of the application, addressing potential vulnerabilities in authentication, authorization, data handling, and infrastructure.

Core Features & Use Cases

  • Security Checklist: A detailed list of security checks covering authentication, input validation, PII compliance, and more.
  • Architectural Conventions: Outlines the security-focused design patterns and features implemented in the application (e.g., JWT, role hierarchy, CSRF protection).
  • Use Case: Developers can use this as a guide during the development process to ensure all security requirements are met and to audit existing code for potential weaknesses.

Quick Start

Review the security checklist to ensure all items are addressed for the current development sprint.

Frequently Asked Questions about Security Conventions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What security conventions should I check for application authentication and authorization?▼

Security conventions for authentication and authorization include enforcing JWT protection, role hierarchy validation, and secure token management to prevent unauthorized access and privilege escalation vulnerabilities.

How do I audit my application code for PII compliance and information leakage?▼

Audit application code for PII compliance and information leakage by reviewing data handling workflows against a security checklist, ensuring sensitive data is masked, encrypted, and excluded from error responses.

Does this security checklist cover infrastructure hardening and response headers?▼

Yes, the security checklist covers infrastructure hardening and response headers, providing conventions to secure deployments and enforce protective HTTP configurations like CORS and CSRF policies.

What is the best way to implement cookie and token security for my application?▼

The best way to implement cookie and token security is by following established architectural conventions that enforce secure attributes, expiration policies, and CSRF protection mechanisms across the application stack.

How do I validate input and secure my application against common vulnerabilities?▼

Validate input and secure your application against vulnerabilities by applying the checklist's secure coding practices, enforcing strict architectural integrity, and sanitizing all incoming data streams.

Related Skills

Explore More Software Engineering Skills→
nimadorostkarnimadorostkar
25

threat-modeling

Apply the STRIDE framework to data-flow models and trust boundaries.

Community
Advanced
dapperdiversdapperdivers
1

vuln-scan

Scan web applications for vulnerabilities using nuclei and nikto.

Community
Advanced
LuisSambranoLuisSambrano
7

code-review

Perform systematic code review and static analysis across multiple programming languages.

Community
Advanced
CENKSSSCENKSSS

pentest-validation

Validate SAST and DAST vulnerability exploitability through a 4-phase pipeline.

Community
Advanced