skills.rest
Mesteriis
MesteriisCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security

Verify security-sensitive changes for secrets, input validation, and error handling.

Updated Jun 28, 2026
Search Tags:#code review#security#configuration management#dependency audit#secret handling
One-click install
npx skills add https://github.com/Mesteriis/Engineering-Bible-AI --skill security-mesteriis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Mesteriis/Engineering-Bible-AI/tree/main/skills/security
Command: npx skills add https://github.com/Mesteriis/Engineering-Bible-AI --skill security-mesteriis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill addresses the need for secure implementation of security-sensitive changes, ensuring that trust boundaries, secret protection, and verification are in place.

Core Features & Use Cases

  • Security Invariants: Prevents hardcoded secrets, unauthorized exposure of credentials, and logging of sensitive information.
  • Pre-change Inspections: Offers a checklist for reviewing auth/authz patterns, configurations, and tests before security changes.
  • Threat Areas: Alerts users about potential risks in authentication, authorization, session handling, and more.
  • Authorization Rule: Distinguishes between authentication and authorization to avoid confusion.
  • Input Handling: Instructs on validating input to ensure data integrity and prevent injection attacks.
  • Error Handling: Emphasizes safe and consistent error reporting for both internal logs and public responses.

Quick Start

Execute the 'security' skill to ensure the integrity of a security-sensitive change, such as modifying a database configuration.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check for hardcoded secrets before deploying configuration changes?▼

To check for hardcoded secrets before deploying configuration changes, use this skill to enforce security invariants that prevent unauthorized credential exposure and sensitive information logging.

What is the best way to review authentication and authorization patterns in my code?▼

Reviewing authentication and authorization patterns requires distinguishing between the two to avoid confusion; this skill provides a pre-change inspection checklist to verify correct auth and authz implementations.

How do I validate input to prevent injection attacks during security updates?▼

To validate input and prevent injection attacks during security updates, apply the skill's input handling instructions to ensure data integrity across security-sensitive operations like configuration management.

Does this security skill work for auditing dependency updates?▼

Yes, this security skill works for auditing dependency updates by verifying security-sensitive operations and enforcing best practices to prevent data breaches during dependency modifications.

Why does my error handling expose sensitive information in public responses?▼

Error handling exposes sensitive information when internal logs and public responses are not separated; this skill emphasizes safe, consistent error reporting to prevent accidental data breaches.

What are the limitations of using automated checks for session handling security?▼

Automated checks for session handling security alert you to potential threat areas but require manual verification of trust boundaries and proper configuration to ensure complete protection against data breaches.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-audit-context-building

Map architecture, trust boundaries, and data flows for security audit scoping.

Official
Advanced
emaginebremaginebr

dotnet-env

Structure .NET project environments with appsettings, docker-compose, and .env files.

Official
Advanced
simotasimota
68

Sentinel

Detect and remediate codebase vulnerabilities including hardcoded secrets and SQL injection.

Community
Advanced
matteocervellimatteocervelli
25

security-scanner

Scan codebases for secrets, vulnerable dependencies, and insecure patterns.

Community
Advanced