What problem does it solve?
This Skill provides comprehensive guidance for implementing and auditing application security across TypeScript, Python, and Rust, helping teams address authentication, authorization, and infrastructure hardening.
Core Features & Use Cases
- Authentication guidance covering JWT, OAuth2, sessions, and device flows across TS, Python, and Rust.
- Authorization patterns including RBAC, ABAC, and Row-Level Security (RLS) with multi-tenant options.
- Security auditing and governance: code reviews, vulnerability checks, and OWASP Top 10 mapping.
- Infrastructure hardening: security headers, CORS, CSP, rate limiting, and secrets management.
- Secure coding practices and template assets to accelerate secure app delivery.
Quick Start
Use security-core to plan and implement a secure baseline: review references/authentication.md, references/authorization.md, and apply templates from assets/configs, then run scripts/audit_security.sh for validation.