skills.rest
cmaenner
cmaennerCOMMUNITY
Explore all skills by this author →
Website𝕏@dafingaGitHub

security-guidance

Apply OWASP ASVS security guidance to code planning and implementation.

5|1|Updated Mar 5, 2026
Search Tags:#security#owasp#guidance#secure coding#vulnerability prevention#asvs
One-click install
npx skills add https://github.com/cmaenner/agent-security-playbook --skill security-guidance-cmaenner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-guidance
Source: https://github.com/cmaenner/agent-security-playbook/tree/main/skills/security-guidance
Command: npx skills add https://github.com/cmaenner/agent-security-playbook --skill security-guidance-cmaenner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill ensures that all code development adheres to industry-standard security practices, preventing common vulnerabilities and protecting against security risks.

Core Features & Use Cases

  • Comprehensive Security Standards: Leverages the OWASP ASVS for detailed security requirements across various domains.
  • Contextual Guidance: Provides specific triggers for when to apply different security sections based on the task at hand.
  • Inline Citations: Mandates referencing applied guidance directly in code or plans for auditability.
  • Use Case: When planning a new feature that involves user authentication, this skill will guide you through the relevant ASVS sections (e.g., V6.1, V6.2, V6.3) to ensure secure implementation from the start.

Quick Start

Use the security-guidance skill to ensure the new user registration endpoint adheres to OWASP ASVS V6.2 password security requirements.

Frequently Asked Questions about security-guidance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I ensure secure coding practices when implementing user authentication?▼

Secure coding for user authentication requires applying OWASP ASVS guidelines, specifically referencing sections like V6.2 for password security requirements directly in your implementation plans to ensure auditability and vulnerability prevention.

What is OWASP ASVS and when do I need it for secure development?▼

OWASP ASVS is an industry-standard security verification standard providing detailed requirements across domains like cryptography, network communication, and access control. You need it during planning and implementation to prevent common vulnerabilities and protect against security risks.

How do I apply security guidance to code involving user input and data persistence?▼

Applying security guidance to user input and data persistence involves triggering specific OWASP ASVS sections based on your task context, ensuring adherence to industry-standard security practices with explicit inline citations for auditability.

Can I use OWASP ASVS guidance for securing file I/O and network communication?▼

Yes, OWASP ASVS guidance applies to securing file I/O and network communication by providing security-first development requirements that ensure adherence to industry-standard practices, preventing common vulnerabilities across these domains.

What's the best way to prevent security vulnerabilities during feature planning?▼

Preventing security vulnerabilities during feature planning is best achieved by leveraging OWASP ASVS to guide you through relevant security sections based on the task at hand, ensuring secure implementation from the start with inline citations for auditability.

Does secure coding guidance work without external security dependencies?▼

Yes, secure coding guidance works independently without external dependencies, providing comprehensive security standards based on OWASP ASVS that cover access control, cryptography, and authentication directly within your development workflow.

Related Skills

Explore More Software Engineering Skills→
OWASPOWASP
141

security-guidance

Apply OWASP ASVS-based security guidance to development tasks with inline citations.

Official
Advanced
JeffallanJeffallan
10.9k

security-reviewer

Identify security vulnerabilities in code, configuration, and infrastructure during audits.

Community
Advanced
AmidVoshakulAmidVoshakul

security-auditor

Conduct security audits and risk assessments across application lifecycles and cloud infrastructure.

Community
Advanced
personamanagmentlayerpersonamanagmentlayer
41

audit-expert

Audit code for security vulnerabilities and compliance with OWASP ASVS and NIST.

Official
Advanced