security

Provide security guidance for backend APIs and web applications.

186|15|Updated Apr 2, 2026

Search Tags:#authorization #security #authentication #jwt #owasp #threat-modeling #secure-coding

Ready to run

npx skills add https://github.com/kid-sid/claude-spellbook --skill security-kid-sid

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/kid-sid/claude-spellbook/tree/main/skills/security
Command: npx skills add https://github.com/kid-sid/claude-spellbook --skill security-kid-sid

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Securing backend APIs and web applications can be complex and error-prone; this Skill provides a comprehensive reference covering authentication, authorization, input validation, secret management, security headers, threat modeling, and dependency hygiene across Python, TypeScript, and Go.

Core Features & Use Cases

Language-agnostic security patterns and best practices for building trusted services.
Practical guidance on JWTs, OAuth2/OIDC, session-based auth, secrets rotation, and dependency scanning.
Use Case: teams performing security reviews or threat modeling can align on secure defaults and implement controls quickly.

Quick Start

Perform a rapid security review of a new API feature following OWASP Top 10 guidelines.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I secure backend APIs using OWASP Top 10 guidelines?▼

Secure backend APIs by applying authentication, authorization, input validation, and security headers aligned with OWASP Top 10 guidelines. This Skill provides practical checklists and code patterns across Python, TypeScript, and Go to implement controls quickly during security reviews.

What is the best way to implement JWT authentication and OAuth2 session management?▼

Implement JWT authentication and OAuth2/OIDC session management using language-agnostic security patterns. This Skill covers secure defaults, token validation, and session-based auth code patterns suitable for Python, TypeScript, and Go backend services.

How does threat modeling apply to secure coding for web applications?▼

Threat modeling applies to secure coding by identifying potential threats and aligning on secure defaults before implementation. This Skill provides practical guidance for teams to conduct security reviews and implement necessary controls for backend APIs.

Can I use these security patterns across Python, TypeScript, and Go projects?▼

Yes, these security patterns apply across Python, TypeScript, and Go projects. The Skill provides language-agnostic best practices for authentication, secrets management, input validation, and dependency hygiene suitable for multi-language backend architectures.

How do I handle secrets rotation and dependency scanning for backend APIs?▼

Handle secrets rotation and dependency scanning by applying secure defaults and dependency hygiene practices. This Skill offers practical guidance on managing secrets lifecycle and scanning dependencies to identify vulnerabilities in backend services.

When do I need security headers and input validation for backend API design?▼

Security headers and input validation are needed whenever designing backend APIs to prevent common web application vulnerabilities. This Skill provides practical checklists and code patterns to implement these controls during secure design discussions and security reviews.