skills.rest
messeb
messebCOMMUNITY
Explore all skills by this author →
Website𝕏@_messebGitHub

security

Implement security best practices for Python and JavaScript code.

Updated Mar 8, 2026
Search Tags:#code review#security#authentication#vulnerability#owasp#encryption#api security
One-click install
npx skills add https://github.com/messeb/skills --skill security-messeb
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/messeb/skills/tree/main/plugins/general-developer/skills/security
Command: npx skills add https://github.com/messeb/skills --skill security-messeb

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers identify and fix security vulnerabilities in their code, protecting against common threats like injection attacks, data breaches, and misconfigurations.

Core Features & Use Cases

  • Input Validation: Demonstrates safe practices for preventing SQL injection, XSS, and command injection.
  • Authentication & Authorization: Provides guidance on secure password hashing, JWT implementation, and access control.
  • Data Protection: Covers encryption at rest and in transit, and secure session management.
  • OWASP Top 10: Addresses critical vulnerabilities like Broken Access Control, Cryptographic Failures, and SSRF.
  • Secrets Management: Guides on using environment variables and secret stores.
  • Dependency Security: Emphasizes auditing and updating dependencies.
  • Audit Checklist: Offers a comprehensive checklist for security reviews.

Quick Start

Review the provided code snippet for potential SQL injection vulnerabilities and suggest a secure alternative.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS vulnerabilities in my code?▼

To prevent SQL injection and XSS vulnerabilities, implement safe input validation practices by sanitizing user inputs and using parameterized queries. This Skill provides practical Python and JavaScript examples for securing applications against injection attacks.

What is the best way to implement secure password hashing and JWT authentication?▼

Secure password hashing and JWT authentication require robust access control mechanisms. This Skill provides guidance on secure authentication, authorization flows, and session management to protect user credentials and tokens.

How do I address OWASP Top 10 vulnerabilities like broken access control and SSRF?▼

Addressing OWASP Top 10 vulnerabilities involves fixing broken access control, cryptographic failures, and SSRF. This Skill offers comprehensive guidance and practical solutions to remediate these critical security misconfigurations in your codebase.

Does this security Skill provide examples for Python and JavaScript?▼

Yes, this security Skill provides practical code examples and best practices specifically in Python and JavaScript. It covers input validation, data encryption, API security, and secrets management across both programming languages.

How do I manage secrets and audit dependencies for API security?▼

Manage secrets using environment variables and dedicated secret stores, and audit dependencies regularly to ensure API security. This Skill guides you through dependency security updates, secrets management, and implementing secure API endpoints.

What should be included in a security audit checklist for code review?▼

A security audit checklist for code review should include input validation, data protection, secrets management, and OWASP Top 10 vulnerabilities. This Skill offers a comprehensive checklist to guide thorough security reviews and identify potential weaknesses.

Related Skills

Explore More Software Engineering Skills→
DonTiziDonTizi
2

security-audit

Scan codebases for secrets, OWASP risks, and vulnerable dependencies.

Community
Advanced
rnavarychrnavarych
14

role-database:database-security

Configure database authentication, authorization, encryption, and auditing for compliance.

Community
Advanced
voidrotvoidrot

sast-configuration

Configure SAST tools like Semgrep, CodeQL, and SonarQube for CI/CD pipelines.

Community
Intermediate
BagelHoleBagelHole
46

dast-scanning

Perform DAST scans on web applications and APIs with OWASP ZAP.

Community
Intermediate