security

Enforce secure-by-default controls and threat modeling for application security posture.

Updated Dec 25, 2025
One-click install
npx skills add https://github.com/mourato/prisma --skill security-mourato
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/mourato/prisma/tree/main/.agents/skills/security
Command: npx skills add https://github.com/mourato/prisma --skill security-mourato

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to protect user data and maintain application integrity by implementing robust security practices.

Core Features & Use Cases

  • Secret Management: Prevents hardcoding sensitive information and ensures secure storage.
  • Data Validation: Enforces input sanitization and type safety to prevent vulnerabilities.
  • Platform Security: Leverages device-specific security features like biometrics and secure transport.
  • Use Case: Securely store API keys and validate all incoming user data to prevent common web vulnerabilities.

Quick Start

Apply platform security controls to protect sensitive data.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent hardcoded API keys and improve secrets management?

Secrets management prevents hardcoded API keys by enforcing secure storage controls and secure-by-default practices. This protects sensitive information and maintains application integrity throughout your development lifecycle.

What is threat modeling and when do I need it for application security?

Threat modeling is a structured process to identify security risks and enforce secure-by-default controls. You need it to protect user data privacy, maintain application integrity, and establish secure coding standards.

Does data validation help prevent common web vulnerabilities?

Data validation prevents common web vulnerabilities by enforcing input sanitization and type safety. This protects application integrity by ensuring all incoming user data is securely processed and validated.

What's the best way to apply platform security controls for sensitive data?

The best way to apply platform security is leveraging device-specific features like biometrics and secure transport. This ensures robust protection for sensitive user data and enhances your overall security posture.

Why does input sanitization fail to protect user data privacy without secure-by-default controls?

Input sanitization fails without secure-by-default controls because threat modeling and data validation must be enforced together. Relying solely on sanitization leaves gaps in application integrity and overall platform security.