security-patterns

Identify and remediate code vulnerabilities using OWASP Top 10 patterns.

284|47|Updated Dec 13, 2025
One-click install
npx skills add https://github.com/groupzer0/vs-code-agents --skill security-patterns-groupzer0
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/groupzer0/vs-code-agents/tree/main/vs-code-agents/skills/security-patterns
Command: npx skills add https://github.com/groupzer0/vs-code-agents --skill security-patterns-groupzer0

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Security-patterns provide a structured approach to identifying and remediating code vulnerabilities using OWASP Top 10 patterns and language-specific weaknesses, enabling consistent security reviews and actionable remediation guidance.

Core Features & Use Cases

  • OWASP Top 10 quick detection patterns with practical remediation guidance for each category.
  • Language-specific vulnerability references for Go, Java, JavaScript/TypeScript, and Python.
  • Threat modeling guidance including STRIDE, data flow considerations, and audit-friendly checklists.
  • Security headers and secure configuration checklists to harden applications.
  • A reusable framework for security assessments, reports, and artifact generation.

Quick Start

Review a repository to identify vulnerabilities and apply remediation recommendations using the security-patterns framework.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and remediate security vulnerabilities in code across multiple programming languages?

Identify and remediate security vulnerabilities in code using standardized OWASP Top 10 patterns and language-specific references for Go, Java, JavaScript/TypeScript, and Python. This framework provides consistent security reviews and actionable remediation guidance.

What is STRIDE threat modeling and how does it apply to security audits?

STRIDE threat modeling is a structured approach for identifying security threats during audits. This framework provides STRIDE guidance, data flow considerations, and audit-friendly checklists to systematically assess architecture and design vulnerabilities.

Does this security-patterns framework support code reviews for Python and Go applications?

Yes, this security-patterns framework supports code reviews for Python and Go applications, alongside Java and JavaScript/TypeScript. It provides language-specific vulnerability references and quick detection patterns for each supported environment.

How do I harden application configurations using OWASP security patterns?

Harden application configurations by applying security headers and secure configuration checklists provided within the framework. These patterns ensure applications meet baseline security standards during architecture and design assessments.

What is the best way to generate structured security assessment reports for dependency reviews?

The best way to generate structured security assessment reports is using a reusable framework that standardizes vulnerability findings and remediation guidance. It supports dependency reviews, security audits, and artifact generation across different project types.

When should I use standardized security patterns instead of ad-h code review checks?

Use standardized security patterns instead of ad-hoc checks when you need consistent vulnerability detection across Go, Java, JavaScript/TypeScript, and Python. Standardized patterns ensure comprehensive coverage of OWASP Top 10 categories and structured remediation.