security-essentials

Security vulnerabilities can be identified through OWASP-aligned analysis focusing on input validation, output sanitization, secrets management, and SQL injection prevention. This Skill applies scanning and remediation patterns during code review, authentication design, and before production deployment to address common attack vectors.

OWASP patterns for authentication include secure password hashing, parameterized queries, CSRF protection, and secure headers. For APIs, implement input validation at boundaries, output sanitization, secrets management separate from code, and authorization checks to prevent unauthorized access and injection attacks.

Prevent injection attacks by using parameterized SQL queries, validating all user input at entry points, and sanitizing output before rendering. This Skill provides patterns for implementing these defenses across your codebase aligned with OWASP guidance.

Yes. This Skill supports regulatory compliance mapping by applying OWASP-aligned security controls—input validation, secrets management, secure headers, and authentication patterns—that satisfy functional requirements for GDPR and SOC2 compliance before production.

You need npm for dependency management and gitleaks for secrets detection. The Skill uses these tools alongside OWASP patterns to scan codebases, identify hardcoded secrets, and provide remediation guidance for security vulnerabilities.

Threat modeling identifies potential attack vectors early in design. This Skill guides you through threat modeling and secure coding practices together, applying OWASP patterns to authentication, API security, and data handling so vulnerabilities are prevented by design rather than patched later.