Security Patterns

Guide web application security with secrets management, authentication, input validation, and dependency auditing.

14|Updated Jan 29, 2026

Search Tags:#security #authentication #input validation #secrets management #vulnerabilities #web application

Ready to run

npx skills add https://github.com/KylerD/vibe-check --skill security-patterns-kylerd

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Security Patterns
Source: https://github.com/KylerD/vibe-check/tree/main/skills/security-patterns
Command: npx skills add https://github.com/KylerD/vibe-check --skill security-patterns-kylerd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides practical guidance and best practices for securing web applications against common vulnerabilities, helping developers build more robust and trustworthy software.

Core Features & Use Cases

Secrets Management: Learn how to securely handle API keys, database credentials, and other sensitive information using environment variables and .gitignore.
Authentication Best Practices: Understand how to implement secure authentication using established libraries, proper password hashing (bcrypt, Argon2), and robust session management.
Input Validation: Prevent common attacks like SQL injection and XSS by validating all user input using libraries like Zod and parameterized queries.
Dependency Security: Maintain a secure dependency tree by using lock files and regularly auditing for vulnerabilities.
Use Case: A developer is building a new feature and needs to ensure API keys are not hardcoded and that user input is properly sanitized to prevent XSS attacks.

Quick Start

Review the best practices for securely managing secrets in your web application.

Frequently Asked Questions about Security Patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I prevent hardcoded secrets in my web application?▼

To prevent hardcoded secrets in web applications, securely manage API keys and database credentials using environment variables and configure .gitignore to avoid committing sensitive information. This practice keeps sensitive data out of source code repositories.

What is the best way to implement secure authentication and password hashing?▼

Secure authentication relies on established libraries and robust session management, using proper password hashing algorithms like bcrypt or Argon2. This ensures user credentials are protected against unauthorized access and breaches.

How do I validate user input to prevent SQL injection and XSS attacks?▼

Validate all user input to prevent SQL injection and XSS attacks by using validation libraries like Zod and parameterized queries for database interactions. This sanitizes data before processing and execution.

How do I maintain dependency security in my web application?▼

Maintain dependency security by using lock files to lock down versions and regularly running dependency auditing tools to detect known vulnerabilities. This practice keeps your application's dependency tree secure and up to date.

Does this guidance cover common web application vulnerabilities like SQL injection and XSS?▼

Yes, this guidance covers common web application vulnerabilities including SQL injection, XSS, and insecure authentication mechanisms. It provides practical solutions using environment variables, secure hashing, and parameterized queries.