Apply OWASP Top 10 security practices to web apps, APIs, and microservices.
npx skills add https://github.com/jnPiyush/AI-Squad --skill security-jnpiyush
Please help me install this Agent Skill. Skill: security Source: https://github.com/jnPiyush/AI-Squad/tree/main/ai_squad/skills/security Command: npx skills add https://github.com/jnPiyush/AI-Squad --skill security-jnpiyush
Provides production security practices to protect applications and mitigate common vulnerabilities across the SDLC.
Use the security skill to draft a secure login flow for an API, covering input validation, JWT authentication, and secrets management.
High-intent search queries and answers about installing and using this skill.
To implement secure coding for an API login flow, apply input validation, JWT authentication, password hashing, and secrets management to protect endpoints and mitigate common vulnerabilities across the SDLC.
Protecting web applications from OWASP Top 10 vulnerabilities involves applying security guardrails like parameterized SQL queries, proper authentication and authorization, and secure configuration to mitigate common code-level risks.
Parameterized SQL prevents injection in microservices by separating SQL code from user input, ensuring that input validation neutralizes malicious data before it reaches the database layer during secure code reviews.
Secure configuration requires secrets management to safely store credentials and sensitive data, utilizing code-level defenses and safe governance practices rather than hardcoding secrets directly within microservices.
Yes, dev teams can use this guide to audit new and existing endpoints, ensuring proper input handling, authentication, and secret storage are applied from the outset during secure development lifecycle support.
HechaoYannetGenerate a master architecture document from GDDs, ADRs, and governance constraints.
0xMerl99Audit code against OWASP Top 10 and assess CVE impacts.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
AcczdyDeploy RASP agents to detect and block in-app attacks in Java and Python web applications.
