skills.rest
pascallammers
pascallammersCOMMUNITY
Explore all skills by this author →
GitHub

security-patterns

Implement OWASP Top 10 security patterns with bcrypt, JWT, and helmet.

1|Updated Sep 26, 2025
Search Tags:#authorization#security#authentication#vulnerability#input validation#owasp#secure coding
One-click install
npx skills add https://github.com/pascallammers/mylo-travel-concierge-v2 --skill security-patterns-pascallammers
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/pascallammers/mylo-travel-concierge-v2/tree/main/.factory/skills/security-patterns
Command: npx skills add https://github.com/pascallammers/mylo-travel-concierge-v2 --skill security-patterns-pascallammers

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers implement robust security measures to protect applications from common vulnerabilities like injection attacks, XSS, CSRF, and data exposure.

Core Features & Use Cases

  • OWASP Top 10 Mitigation: Provides code examples and strategies for addressing the most critical web application security risks.
  • Secure Coding Practices: Demonstrates how to properly handle authentication, authorization, input validation, and sensitive data.
  • Use Case: When building a new user registration system, use this Skill to ensure passwords are securely hashed, inputs are validated, and authentication tokens are managed correctly.

Quick Start

Implement secure password hashing using bcrypt for user authentication.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent OWASP Top 10 vulnerabilities in my web application?▼

To prevent OWASP Top 10 vulnerabilities, implement defense-in-depth protection using libraries like bcrypt, JWT, Zod, and helmet to address injection, XSS, CSRF, and data exposure risks.

What is the best way to implement secure session management and authentication?▼

Secure session management and authentication are best implemented using JWT for token management, bcrypt for password hashing, and express-session to maintain secure user states.

How do I sanitize user input to prevent XSS and injection attacks?▼

To sanitize user input against XSS and injection attacks, use Zod for input validation and DOMPurify to clean HTML, ensuring malicious scripts are neutralized before processing.

Does this approach work for adding rate limiting and security headers?▼

Yes, this approach works for rate limiting and security headers by integrating express-rate-limit to control traffic and helmet to configure secure HTTP headers for your application.

How do I protect against CSRF attacks in an Express application?▼

To protect against CSRF attacks in an Express application, implement the csurf library to generate and validate tokens, ensuring malicious cross-site requests are rejected.

Related Skills

Explore More Software Engineering Skills→
TbK0ngTbK0ng

trellis-bootstrap

Initialize Trellis AI workflow scaffolding with .trellis structure, memory, and CLI hooks.

Community
Intermediate
kreuzberg-devkreuzberg-dev
836

security-logging-and-audit

Log security events for audit trails while preventing sensitive data exposure.

Official
Intermediate
antgroupantgroup
34

pentest-access-control

Identifies and validates web/API authorization vulnerabilities including RBAC bypass and privilege escalation.

Official
Advanced
NagyViktNagyVikt
2

vercel-firewall

Configure Vercel Firewall WAF rules, rate limiting, and OWASP protection.

Community
Advanced