security-essentials

Identify and remediate codebase security vulnerabilities using OWASP-aligned guidance.

5|Updated Nov 6, 2025

Search Tags:#security #authentication #owasp #encryption #secrets #headers #csrf

Ready to run

npx skills add https://github.com/Primadetaautomation/primadata-marketplace --skill security-essentials

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-essentials
Source: https://github.com/Primadetaautomation/primadata-marketplace/tree/main/.claude/skills/security-essentials
Command: npx skills add https://github.com/Primadetaautomation/primadata-marketplace --skill security-essentials

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires npm, gitleaks, and includes scripts (resource) components.

What problem does it solve?

This Skill provides comprehensive security guidance and practical patterns aligned with OWASP best practices to prevent common vulnerabilities.

Core Features & Use Cases

Input validation, output sanitization, secrets management: core security controls
Authentication/Authorization patterns: secure access
Secure headers, CSRF, SQL injection prevention: defense-in-depth
Threat modeling and secure coding: guided design

Quick Start

"Ask AI to implement OWASP-aligned security checks and refactor code to follow the guidelines in the skill."

Frequently Asked Questions about security-essentials

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify and fix security vulnerabilities in my codebase?▼

Security vulnerabilities can be identified through OWASP-aligned analysis focusing on input validation, output sanitization, secrets management, and SQL injection prevention. This Skill applies scanning and remediation patterns during code review, authentication design, and before production deployment to address common attack vectors.

What OWASP security patterns should I implement for authentication and API design?▼

OWASP patterns for authentication include secure password hashing, parameterized queries, CSRF protection, and secure headers. For APIs, implement input validation at boundaries, output sanitization, secrets management separate from code, and authorization checks to prevent unauthorized access and injection attacks.

How do I prevent SQL injection and other code injection attacks?▼

Prevent injection attacks by using parameterized SQL queries, validating all user input at entry points, and sanitizing output before rendering. This Skill provides patterns for implementing these defenses across your codebase aligned with OWASP guidance.

Can I use this for compliance mapping to GDPR or SOC2 requirements?▼

Yes. This Skill supports regulatory compliance mapping by applying OWASP-aligned security controls—input validation, secrets management, secure headers, and authentication patterns—that satisfy functional requirements for GDPR and SOC2 compliance before production.

What dependencies do I need to run security checks on my code?▼

You need npm for dependency management and gitleaks for secrets detection. The Skill uses these tools alongside OWASP patterns to scan codebases, identify hardcoded secrets, and provide remediation guidance for security vulnerabilities.

How does threat modeling fit into secure code design?▼

Threat modeling identifies potential attack vectors early in design. This Skill guides you through threat modeling and secure coding practices together, applying OWASP patterns to authentication, API security, and data handling so vulnerabilities are prevented by design rather than patched later.