security

Apply OWASP Top 10 security practices to web apps, APIs, and microservices.

Updated Jan 23, 2026

Search Tags:#OWASP #security #authentication #input-validation #data-protection #code-review #secrets-management

Ready to run

npx skills add https://github.com/jnPiyush/AI-Squad --skill security-jnpiyush

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/jnPiyush/AI-Squad/tree/main/ai_squad/skills/security
Command: npx skills add https://github.com/jnPiyush/AI-Squad --skill security-jnpiyush

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides production security practices to protect applications and mitigate common vulnerabilities across the SDLC.

Core Features & Use Cases

Security guardrails: guidance aligned with OWASP Top 10, input validation, authentication/authorization, and secure coding reviews.
Secure development lifecycle support: instructions for parameterized queries, password hashing, secret management, TLS, and secure configuration.
Use Case: Dev teams can consult this Skill when auditing new endpoints to ensure proper input handling, authentication, and secret storage from the outset.

Quick Start

Use the security skill to draft a secure login flow for an API, covering input validation, JWT authentication, and secrets management.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement secure coding practices for an API login flow?▼

To implement secure coding for an API login flow, apply input validation, JWT authentication, password hashing, and secrets management to protect endpoints and mitigate common vulnerabilities across the SDLC.

What are the best ways to protect web applications from OWASP Top 10 vulnerabilities?▼

Protecting web applications from OWASP Top 10 vulnerabilities involves applying security guardrails like parameterized SQL queries, proper authentication and authorization, and secure configuration to mitigate common code-level risks.

How does parameterized SQL prevent injection in microservices?▼

Parameterized SQL prevents injection in microservices by separating SQL code from user input, ensuring that input validation neutralizes malicious data before it reaches the database layer during secure code reviews.

Do I need dedicated secrets management tools for secure configuration?▼

Secure configuration requires secrets management to safely store credentials and sensitive data, utilizing code-level defenses and safe governance practices rather than hardcoding secrets directly within microservices.

Can this guide help audit existing endpoints for input handling and authentication?▼

Yes, dev teams can use this guide to audit new and existing endpoints, ensuring proper input handling, authentication, and secret storage are applied from the outset during secure development lifecycle support.