Security Conventions

Document security conventions and provide a checklist for application security.

1|Updated Mar 9, 2026
One-click install
npx skills add https://github.com/Emmanuelkwaa/NetRockTemplate --skill security-conventions-emmanuelkwaa
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Conventions
Source: https://github.com/Emmanuelkwaa/NetRockTemplate/tree/main/.claude/skills/security-conventions
Command: npx skills add https://github.com/Emmanuelkwaa/NetRockTemplate --skill security-conventions-emmanuelkwaa

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a comprehensive checklist and set of conventions to ensure the security of an application, covering authentication, authorization, input validation, PII compliance, and more.

Core Features & Use Cases

  • Security Checklist: A detailed list of security considerations across various domains.
  • Architecture Context: Explains the security-related architectural decisions made in the project.
  • Use Case: Developers can use this as a guide during development and code reviews to ensure all security best practices are followed, preventing common vulnerabilities.

Quick Start

Review the security checklist to ensure all items are addressed in the current development sprint.

Frequently Asked Questions about Security Conventions

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What security conventions should I check for during a code review?

A security code review should check conventions for authentication, authorization, input validation, PII compliance, CSRF protection, and response headers. This skill provides a comprehensive checklist covering these secure coding practices to mitigate common vulnerabilities.

How do I ensure my application follows secure coding practices for authentication and authorization?

To ensure secure coding practices for authentication and authorization, review your implementation against established security conventions. This skill provides a detailed checklist covering authentication, authorization, input validation, and PII compliance to guide development and prevent common vulnerabilities.

What's the best way to document security-related architectural decisions in my project?

Documenting security architecture involves recording conventions for authentication, authorization, and input validation mechanisms. This skill provides architecture context explaining security-related decisions, ensuring developers adhere to secure coding practices during development and code reviews.

Does this security checklist cover PII compliance and CSRF protection?

Yes, this security checklist covers PII compliance and CSRF protection. It provides comprehensive conventions across multiple security domains, including input validation and response headers, ensuring adherence to secure coding practices and mitigating common application vulnerabilities.

How do I validate input and configure response headers to mitigate common vulnerabilities?

To validate input and configure response headers, follow established security conventions that mitigate common vulnerabilities. This skill provides a detailed checklist covering input validation, response headers, authentication, and PII compliance for securing your application.