skills.rest
KylerD
KylerDCOMMUNITY
Explore all skills by this author →
GitHub

Security Patterns

Guide web application security with secrets management, authentication, input validation, and dependency auditing.

14|Updated Jan 29, 2026
Search Tags:#security#authentication#input validation#secrets management#vulnerabilities#web application
One-click install
npx skills add https://github.com/KylerD/vibe-check --skill security-patterns-kylerd
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Patterns
Source: https://github.com/KylerD/vibe-check/tree/main/skills/security-patterns
Command: npx skills add https://github.com/KylerD/vibe-check --skill security-patterns-kylerd

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides practical guidance and best practices for securing web applications against common vulnerabilities, helping developers build more robust and trustworthy software.

Core Features & Use Cases

  • Secrets Management: Learn how to securely handle API keys, database credentials, and other sensitive information using environment variables and .gitignore.
  • Authentication Best Practices: Understand how to implement secure authentication using established libraries, proper password hashing (bcrypt, Argon2), and robust session management.
  • Input Validation: Prevent common attacks like SQL injection and XSS by validating all user input using libraries like Zod and parameterized queries.
  • Dependency Security: Maintain a secure dependency tree by using lock files and regularly auditing for vulnerabilities.
  • Use Case: A developer is building a new feature and needs to ensure API keys are not hardcoded and that user input is properly sanitized to prevent XSS attacks.

Quick Start

Review the best practices for securely managing secrets in your web application.

Frequently Asked Questions about Security Patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent hardcoded secrets in my web application?▼

To prevent hardcoded secrets in web applications, securely manage API keys and database credentials using environment variables and configure .gitignore to avoid committing sensitive information. This practice keeps sensitive data out of source code repositories.

What is the best way to implement secure authentication and password hashing?▼

Secure authentication relies on established libraries and robust session management, using proper password hashing algorithms like bcrypt or Argon2. This ensures user credentials are protected against unauthorized access and breaches.

How do I validate user input to prevent SQL injection and XSS attacks?▼

Validate all user input to prevent SQL injection and XSS attacks by using validation libraries like Zod and parameterized queries for database interactions. This sanitizes data before processing and execution.

How do I maintain dependency security in my web application?▼

Maintain dependency security by using lock files to lock down versions and regularly running dependency auditing tools to detect known vulnerabilities. This practice keeps your application's dependency tree secure and up to date.

Does this guidance cover common web application vulnerabilities like SQL injection and XSS?▼

Yes, this guidance covers common web application vulnerabilities including SQL injection, XSS, and insecure authentication mechanisms. It provides practical solutions using environment variables, secure hashing, and parameterized queries.

Related Skills

Explore More Software Engineering Skills→
toqoztoqoz

nodejs-package-manager

Detect the correct Node.js package manager by inspecting project lock files.

Community
Basic
0xRayAI0xRayAI

security-scan

Scan software projects for security vulnerabilities and generate risk reports.

Official
Intermediate
andregusman-raizandregusman-raiz
19

ag-preparar-ambiente

Provision local development and CI/CD environments with Docker and pipeline scaffolding.

Community
Intermediate
seb1nseb1n
147

static-application-security-testing

Run SAST scans with Semgrep and CodeQL to detect vulnerabilities in source code.

Community
Advanced