skills.rest
nonputtipong
nonputtipongCOMMUNITY
Explore all skills by this author →
GitHub

Security Engineer

Implement security best practices across application stacks, including authentication and input validation.

Updated Feb 24, 2026
Search Tags:#authorization#security#authentication#owasp#compliance#encryption#appsec
One-click install
npx skills add https://github.com/nonputtipong/Oryn --skill security-engineer-nonputtipong
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Engineer
Source: https://github.com/nonputtipong/Oryn/tree/main/.agent/skills/security-engineer
Command: npx skills add https://github.com/nonputtipong/Oryn --skill security-engineer-nonputtipong

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill addresses the critical need to implement robust security measures across an application's entire stack, preventing vulnerabilities and protecting sensitive data.

Core Features & Use Cases

  • Authentication & Authorization: Guides implementation of secure login systems (JWT, OAuth) and access control.
  • Input Validation & Sanitization: Prevents common attacks like SQL injection and XSS by ensuring all user input is validated and output is escaped.
  • Secure Configuration: Advises on managing secrets, setting security headers, and configuring CORS.
  • Data Protection: Recommends best practices for password hashing and data encryption.
  • Monitoring & Response: Helps set up rate limiting, audit logging, and error handling.
  • Use Case: When developing a new API, use this skill to ensure secure authentication, validate all incoming data, and configure appropriate security headers before deployment.

Quick Start

Use the security-engineer skill to implement JWT authentication for my new API endpoints.

Frequently Asked Questions about Security Engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure JWT authentication for my API endpoints?▼

To implement secure JWT authentication, you must modify your code and update configurations to integrate secure login systems, ensuring that access control mechanisms are properly established across your application stack.

What is the best way to prevent SQL injection and XSS vulnerabilities in my application?▼

Preventing SQL injection and XSS requires strict input validation and sanitization, ensuring all user input is validated and output is escaped to address OWASP Top 10 vulnerabilities effectively.

How do I configure security headers and manage secrets for my application stack?▼

Configuring security headers and managing secrets involves updating your application's secure configuration settings, which includes properly configuring CORS and establishing robust data protection practices.

Does this approach to application security support OAuth integration?▼

Yes, this approach supports OAuth integration by guiding the implementation of secure login systems and access control, requiring code modifications to effectively integrate these authentication measures.

Why do I need to modify code and update configurations to fortify my application stack?▼

Code modification and configuration updates are required to effectively integrate security measures like data encryption, rate limiting, and audit logging, ensuring comprehensive protection across your entire application stack.

Related Skills

Explore More Software Engineering Skills→
0x53c70x53c7
1

endpoint-enumerator

Identify API endpoints and map their authentication and authorization controls.

Official
Advanced
Omar-ObandoOmar-Obando
44

security-auditor

Guide security audits across OWASP Top 10 and compliance frameworks.

Community
Intermediate
huangwb8huangwb8
47

security-specialist

Identify and mitigate security risks through threat modeling and compliance checks.

Community
Advanced
OWASPOWASP
141

secrets-scan

Detect hardcoded secrets in source code and configuration files.

Official
Intermediate