One-click install
npx skills add https://github.com/esperie/new-project --skill security-patterns-esperie
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/esperie/new-project/tree/main/.claude/skills/18-security-patterns
Command: npx skills add https://github.com/esperie/new-project --skill security-patterns-esperie

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a curated set of security patterns and best practices tailored for Kailash SDK development, helping teams avoid common vulnerabilities from the start.

Core Features & Use Cases

  • Secret management: avoid hardcoded credentials and use secure vaults or environment variables.
  • Input validation: enforce robust validation to prevent injection and misuse.
  • Authentication & Authorization: implement proper access controls and token handling.
  • OWASP compliance: apply Top 10 best practices and secure coding standards.
  • Secure API design: design APIs with least privilege and safe data handling.
  • Guidance & checks: reference rules and audits to support security reviews.

Quick Start

Run a quick security review on your Kailash SDK project using the skill's guidelines and checklists. For example, ask the assistant to validate that all secrets are sourced from environment variables rather than hardcoded.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure authentication and authorization patterns in my Kailash SDK project?

Secure authentication and authorization patterns in Kailash SDK projects enforce proper access controls and token handling, preventing unauthorized access. The skill codifies these patterns to help teams implement robust API security from the start.

What is the best way to manage secrets and avoid hardcoded credentials in a Kailash SDK application?

Secret management in Kailash SDK applications avoids hardcoded credentials by sourcing secrets from secure vaults or environment variables. Applying these patterns prevents accidental exposure of sensitive credentials during development and deployment.

How do I enforce input validation to prevent injection attacks in Kailash SDK APIs?

Input validation in Kailash SDK APIs enforces robust data checks to prevent injection and misuse. The skill provides codified patterns that help developers validate inputs consistently and avoid common vulnerabilities.

Does this skill help with OWASP Top 10 compliance for secure coding in Kailash SDK ecosystems?

OWASP Top 10 compliance for Kailash SDK ecosystems is supported by applying secure coding standards and best practices. The skill codifies these patterns to guide security reviews and ensure applications meet compliance requirements.

Can I use this skill to run a security review and audit on my existing Kailash SDK codebase?

Security reviews on existing Kailash SDK codebases can be run using the skill's guidelines and checklists. It references rules and audits to validate practices like environment-based secret sourcing and safe API design.

When should I apply secure API design patterns for least privilege in Kailash SDK development?

Secure API design patterns for least privilege in Kailash SDK development should be applied during initial API creation to ensure safe data handling. Implementing these patterns early prevents over-privileged access and reduces attack surface.