security-patterns

Input validation, output encoding, and secure authentication prevent OWASP Top 10 vulnerabilities. This Skill maps each vulnerability category to specific patterns—like parameterized queries for injection, cryptographic key management for exposure, and security headers for misconfiguration—applicable across languages and frameworks during code reviews and threat modeling.

Secure authentication and authorization patterns enforce identity verification and access control. This Skill provides functional requirements for both—credential handling, token validation, privilege separation—with code examples and checklists to integrate safely into web applications regardless of framework.

Secrets management patterns protect API keys, database credentials, and encryption keys from exposure. This Skill covers storage, rotation, access control, and configuration practices to prevent leakage and enforce least-privilege principles across deployment environments.

Yes, these patterns are language and framework agnostic. The Skill addresses universal vulnerabilities—input validation, output encoding, cryptographic best practices, secure headers—that apply to Python, Node.js, Java, Go, and other stacks through shared principles and technical requirements.

Generate a baseline security assessment and prioritized improvements list aligned to OWASP Top 10 severity. This Skill maps quick-reference vulnerabilities to actionable patterns, enabling you to address highest-risk gaps first through checklists and code examples.

Security headers and configuration patterns mitigate clickjacking, MIME-sniffing, XSS, and other attacks by enforcing browser and server behavior. This Skill specifies headers like Content-Security-Policy and X-Frame-Options, plus configuration requirements for secure deployment.