skills.rest
RevTechStudio
RevTechStudioCOMMUNITY
Explore all skills by this author →
GitHub

security-guidelines

Provide security guidelines for authentication, encryption, input validation, and secure logging.

Updated Aug 27, 2026
Search Tags:#OWASP#input validation#secure coding#data protection#vulnerability management#security guidelines#HTTPS
One-click install
npx skills add https://github.com/RevTechStudio/rts-plugins --skill security-guidelines
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-guidelines
Source: https://github.com/RevTechStudio/rts-plugins/tree/main/rts-foundation/skills/security-guidelines
Command: npx skills add https://github.com/RevTechStudio/rts-plugins --skill security-guidelines

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides essential guidelines for secure software development and operations, minimizing the risk of vulnerabilities. It covers critical areas like sensitive data handling, secure communication, input validation, and dependency management, ensuring robust and safe applications.

Core Features & Use Cases

  • Sensitive Data Management: Defines rules for securely storing and handling confidential information like API keys and passwords, preventing exposure.
  • Secure Communication: Mandates HTTPS/SSL/TLS for all external communications, ensuring data encryption and protection against man-in-the-middle attacks.
  • Input Validation & Sanitization: Emphasizes rigorous validation and sanitization of all user inputs to prevent common attacks like SQL Injection and XSS.
  • Use Case: When developing a new API, use this skill to ensure all endpoints handle sensitive data securely, validate all incoming parameters, and use HTTPS, thereby building a robust and secure application from the ground up.

Quick Start

Explain the security guidelines for handling sensitive data, ensuring secure communication, and validating user inputs in a new API development project.

Frequently Asked Questions about security-guidelines

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate and sanitize user input to prevent SQL injection and XSS attacks?▼

Input validation and sanitization require checking all user-supplied data against strict rules before processing, rejecting malformed entries and removing dangerous characters. This prevents attackers from injecting SQL commands or malicious scripts into your application.

What are the essential practices for handling sensitive data like API keys and passwords securely?▼

Sensitive data management requires storing credentials in encrypted vaults or environment variables, never in code or logs, and restricting access through authentication and authorization controls. This prevents accidental exposure and unauthorized access to secrets.

Why is HTTPS required for all external communications?▼

HTTPS uses SSL/TLS encryption to protect data in transit between client and server, preventing man-in-the-middle attacks and eavesdropping. It ensures confidentiality and integrity of all network communications.

How do I secure an API endpoint to handle sensitive data properly?▼

Secure API development requires validating all incoming parameters, enforcing HTTPS for all endpoints, implementing authentication and authorization, and applying secure error handling that doesn't leak sensitive information in responses.

What dependency management practices reduce vulnerability risk in production?▼

Dependency vulnerability management involves tracking all third-party libraries, regularly scanning for known vulnerabilities, updating to patched versions promptly, and removing unused dependencies to minimize the attack surface.

Related Skills

Explore More Software Engineering Skills→
AutumnsGroveAutumnsGrove
26

env-config

Manage Python environment configurations and encrypt secrets across dev, staging, and prod.

Community
Intermediate
xlelibertyxleliberty

security-pen-testing

Perform offensive security assessments with vulnerability scanning and penetration testing.

Community
Advanced
chef0111chef0111
1

better-auth

Implement authentication and authorization for TypeScript applications with Better Auth.

Community
Advanced
seb1nseb1n
147

security-audit

Audit applications and infrastructure for vulnerabilities against OWASP Top 10 and SOC 2.

Community
Advanced