security-guidance

Audit codebases for XSS, injection, and unsafe data flows.

Updated Feb 4, 2026

Search Tags:#security #vulnerability #XSS #injection #risk-assessment #code-review #analyze

Ready to run

npx skills add https://github.com/SuperCorks/agent-skills --skill security-guidance

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-guidance
Source: https://github.com/SuperCorks/agent-skills/tree/main/security-guidance
Command: npx skills add https://github.com/SuperCorks/agent-skills --skill security-guidance

SYSTEM DOCUMENTATION & REQUIREMENTS

## What problem does it solve? This skill helps developers identify and remediate common client- and server-side security vulnerabilities in codebases.

## Core Features & Use Cases

Checklist-driven guidance for spotting XSS, injection, unsafe data flows, and misconfigurations across web apps and APIs.
Structured audits: provides a repeatable process for code reviews, CI checks, and security assessments.
Real-world scenarios: apply the guidance to production code to reduce risk and improve compliance.

### Quick Start Ask the AI to run a security vulnerability audit on the repository and generate a prioritized report detailing detected issues and mitigations.

Frequently Asked Questions about security-guidance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security vulnerabilities like XSS and injection in my codebase?▼

To identify security vulnerabilities like XSS and injection, use a checklist-driven audit to spot unsafe data flows and misconfigurations across web apps and APIs. This provides structured guidance to reduce risk and improve compliance during code reviews.

What is the best way to run a security audit on a web application API?▼

The best way to run a security audit on a web API is to apply a structured, repeatable process that checks for unsafe data flows and misconfigurations. This generates a prioritized report detailing detected issues and mitigations.

Can I integrate security risk assessment checks into a CI pipeline?▼

Yes, you can integrate security risk assessment checks into a CI pipeline to implement a reproducible audit workflow. This applies policy-driven checks during standard static analysis to catch unsafe data flows and misconfigurations automatically.

Do I need external security tools to detect unsafe data flows in my repository?▼

No, you do not need external security tools to detect unsafe data flows beyond standard static analysis and policy-driven checks. The guidance helps you spot risky patterns across web apps and APIs using these existing analysis capabilities.

When should I perform a code review security assessment for my web app?▼

You should perform a code review security assessment for your web app when you need to reduce risk and improve compliance before production deployment. It identifies common client- and server-side vulnerabilities like XSS and injection.