security

Enforce secure coding practices for inputs, authentication, authorization, and data handling.

Updated Dec 11, 2024

Search Tags:#authorization #security #authentication #owasp #input-validation #data-protection #secure-cookies

Ready to run

npx skills add https://github.com/huaxel/dotfiles --skill security-huaxel

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/huaxel/dotfiles/tree/main/skills/security
Command: npx skills add https://github.com/huaxel/dotfiles --skill security-huaxel

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Harden code at trust boundaries by enforcing secure handling of inputs, authentication, authorization, secrets, and data storage to reduce common vulnerabilities.

Core Features & Use Cases

Validate external input at API boundaries to prevent injection and malformed data.
Enforce authentication and authorization controls, and manage sessions securely.
Protect secrets and sensitive data with proper storage, access controls, and encryption practices.
Provide guidelines for secure API design, error handling, and secure default configurations.

Quick Start

Start applying the Three-Tier Boundary System to your project and begin validating inputs, encoding outputs, and securing secrets.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce secure coding practices at API trust boundaries?▼

Secure API trust boundaries by validating external inputs, applying parameterized queries, and enforcing authentication controls to prevent injection and malformed data vulnerabilities.

What is the best way to manage user authentication and authorization securely?▼

Secure user authentication and authorization by implementing robust access controls, managing sessions with secure cookies, and utilizing secure password storage mechanisms to protect user data.

Does this secure coding approach work for external integrations and payment services?▼

Yes, this secure coding approach applies to external integrations and payment services, providing secure API design and data protection guidelines across multiple programming languages.

How do I protect secrets and sensitive data in my web applications?▼

Protect secrets and sensitive data in web applications by applying proper storage, access controls, and encryption practices alongside secure default configurations to reduce common vulnerabilities.

What are the mandatory input validation practices to prevent injection attacks?▼

Mandatory input validation practices to prevent injection attacks include validating external inputs at API boundaries, encoding outputs, and utilizing parameterized queries for database interactions.