skills.rest
duylinhdang1998
duylinhdang1998COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-expert

Provide security guidance and remediation for web and API vulnerabilities.

Updated Apr 16, 2026
Search Tags:#authorization#security#authentication#owasp#encryption#secure-coding#vulnerability-assessment
One-click install
npx skills add https://github.com/duylinhdang1998/claude-template-agent --skill security-expert-duylinhdang1998
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-expert
Source: https://github.com/duylinhdang1998/claude-template-agent/tree/main/plugins/vfm-agent-company/skills/security-expert
Command: npx skills add https://github.com/duylinhdang1998/claude-template-agent --skill security-expert-duylinhdang1998

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers and security teams prevent and remediate common application vulnerabilities by providing concrete guidance, secure code patterns, and operational checklists for authentication, authorization, encryption, and OWASP Top 10 mitigation.

Core Features & Use Cases

  • Secure Authentication & Authorization: Patterns and examples for JWT, OAuth2, OIDC, RBAC, and ABAC with token best practices and session management.
  • Cryptography & Data Protection: Guidance for AES/GCM encryption, key management, TLS enforcement, and secure password hashing.
  • Vulnerability Mitigation: Concrete fixes for XSS, CSRF, SQL/NoSQL injection, SSRF, command injection, and security misconfiguration including secure headers and CORS.
  • Audit & Hardening: Security checklists, logging/monitoring recommendations, dependency audits, SRI, code signing, and deployment hardening for production systems.
  • Use Case: Audit a Node.js/Express API that uses JWT and a database ORM, produce prioritized remediation steps, example code fixes, and a checklist for production hardening.

Quick Start

Ask the security-expert to audit authentication, authorization, encryption, and OWASP Top 10 protections for your web API and produce prioritized remediation steps with example code.

Frequently Asked Questions about security-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure JWT authentication and OAuth2 authorization for my web API?▼

Secure JWT authentication and OAuth2 authorization require correct token validation, proper claim mapping, and robust session management. Use this Skill to generate concrete code patterns for token handling, RBAC/ABAC enforcement, and secure session configuration.

What are the best ways to prevent OWASP Top 10 vulnerabilities like XSS and CSRF in web applications?▼

Preventing OWASP Top 10 vulnerabilities like XSS and CSRF requires strict input validation, secure headers, and CORS configuration. This Skill provides concrete remediation steps and secure code examples to mitigate injection attacks and security misconfigurations.

How do I configure TLS enforcement and AES encryption for data protection in backend services?▼

TLS enforcement and AES encryption for backend services require proper key management and secure cipher configurations. This Skill provides guidance on AES/GCM encryption, TLS setup, and secure password hashing for data protection.

Can I audit my Node.js Express API for dependency vulnerabilities and deployment hardening issues?▼

You can audit Node.js Express APIs for dependency vulnerabilities and deployment hardening issues. This Skill produces prioritized remediation steps, security checklists, logging recommendations, and hardening configurations for production systems.

How does parameterized query implementation prevent SQL and NoSQL injection in REST and GraphQL APIs?▼

Parameterized queries prevent SQL and NoSQL injection by separating code from user-supplied data. This Skill offers secure coding patterns and vulnerability mitigation steps to protect REST and GraphQL APIs from command injection attacks.

What secure session management and logging monitoring practices should I apply for production hardening?▼

Secure session management and logging monitoring practices for production hardening involve tracking authentication events and detecting anomalies. This Skill generates operational checklists, logging recommendations, and deployment hardening steps.

Related Skills

Explore More Software Engineering Skills→
personamanagmentlayerpersonamanagmentlayer
41

security-expert

Guide application security with OWASP Top 10 mitigation and secure coding practices.

Official
Advanced
LeandroBenjaminLLeandroBenjaminL

security-auditor

Automate security audits with static and dynamic analysis tools.

Community
Advanced
nikhillinitnikhillinit

security-scanner

Detect security vulnerabilities, secrets, and misconfigurations in codebases.

Community
Advanced
gerald-icagerald-ica

SQLMap Database Penetration Testing

Automate SQL injection testing and database enumeration with SQLMap.

Community
Advanced