security

Identify and mitigate security vulnerabilities using OWASP Top 10 guidance.

Updated Jan 24, 2026

Search Tags:#authorization #security #authentication #owasp #injection #vulnerabilities #threat-modeling

Ready to run

npx skills add https://github.com/jaeyeonling/opencode-kit --skill security-jaeyeonling

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/jaeyeonling/opencode-kit/tree/main/.opencode/skills/security
Command: npx skills add https://github.com/jaeyeonling/opencode-kit --skill security-jaeyeonling

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify and mitigate security vulnerabilities early in development by applying OWASP Top 10 guidance and secure authentication/authorization patterns.

Core Features & Use Cases

Threat modeling and risk assessment to identify design flaws in architectures and code.
Security best practices covering input validation, data handling, cryptography, and access control.
Use Case: During a code review, apply the guide to spot broken access control and insecure cryptography.

Quick Start

Perform a rapid security review on your project focusing on authentication, authorization, and data protection.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I identify security vulnerabilities using OWASP Top 10 guidance during a code review?▼

Identify security vulnerabilities using OWASP Top 10 guidance by reviewing codebases and system designs for broken access control, injection flaws, and insecure cryptography. This process detects design weaknesses across authentication, authorization, and data handling to mitigate risks early.

What is threat modeling and how does it find design flaws in system architectures?▼

Threat modeling is a risk assessment process that identifies design flaws in system architectures and code. It applies secure design patterns to evaluate input validation, configuration hardening, and access control to mitigate potential security vulnerabilities early.

How do I apply secure design patterns for authentication and authorization in my project?▼

Apply secure design patterns for authentication and authorization by enforcing proper cryptography practices, strict access control, and input validation. This approach mitigates vulnerabilities across codebases and system designs during rapid security reviews and vulnerability assessments.

Can I use this security review approach for multiple programming languages and frameworks?▼

Yes, this security review approach applies to multiple programming languages and frameworks. It evaluates system designs and codebases using OWASP Top 10 guidance to detect vulnerabilities in data handling, configuration hardening, and cryptography regardless of the tech stack.

What is the best way to mitigate injection vulnerabilities during software development?▼

The best way to mitigate injection vulnerabilities is applying strict input validation, secure data handling, and configuration hardening. Using OWASP Top 10 guidance during threat modeling and code reviews identifies and resolves these security flaws across architectures.

When should I perform a rapid security review focusing on data protection and access control?▼

Perform a rapid security review focusing on data protection and access control during code reviews and vulnerability assessments. This identifies broken access control and insecure cryptography early, ensuring secure design patterns are applied across your project.