skills.rest
softspark
softsparkCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-patterns

Provide OWASP Top 10 mitigations and security patterns for web applications and APIs.

161|21|Updated Mar 26, 2026
Search Tags:#authorization#security#authentication#owasp#input-validation#rate-limiting#secrets-management
One-click install
npx skills add https://github.com/softspark/ai-toolkit --skill security-patterns-softspark
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/softspark/ai-toolkit/tree/main/app/skills/security-patterns
Command: npx skills add https://github.com/softspark/ai-toolkit --skill security-patterns-softspark

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides concise, actionable security patterns and operational guidance to help developers and engineers prevent common vulnerabilities, misconfigurations, and credential leaks across web applications and APIs.

Core Features & Use Cases

  • OWASP Top 10 mitigation advice for injection, XSS, broken auth, and insecure deserialization.
  • Security header and CSP recommendations to reduce client-side attack surface.
  • Secrets management guidance and secret-scanning practices to avoid credential exposure.
  • Authentication and authorization patterns including JWT strategy, RBAC/ABAC examples, and OAuth2 flows.
  • Rate limiting, input validation, and audit logging examples for resilient API defenses and incident investigation.

Quick Start

Ask the skill to review your project's authentication, headers, secrets management, rate limiting, and logging and produce prioritized, implementable fixes.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I mitigate OWASP Top 10 vulnerabilities like injection and XSS in web applications?▼

Mitigating OWASP Top 10 vulnerabilities requires applying specific security patterns for input validation, secure headers, CSP, and correct authorization to reduce injection and XSS risks in web applications.

What is the best way to implement JWT and OAuth2 authentication patterns for APIs?▼

Implementing JWT and OAuth2 authentication patterns involves adopting structured token strategies, RBAC and ABAC examples, and secure authorization flows to protect RESTful APIs from broken authentication.

How do I prevent credential exposure with secrets management and scanning practices?▼

Preventing credential exposure requires applying secrets management guidance and secret-scanning practices to avoid credential leaks across web application deployment configurations and codebases.

Can I use rate limiting and audit logging to improve API defenses during incident response?▼

Rate limiting and audit logging patterns improve API defenses by restricting excessive requests and recording operational events, providing critical investigation logs during incident response and security audits.

Does this security guidance cover CSRF protections and secure headers for RESTful APIs?▼

Yes, this security guidance covers CSRF protections and secure header recommendations to reduce client-side attack surfaces across RESTful APIs and web application deployment configurations.

Related Skills

Explore More Software Engineering Skills→
lpjhelderlpjhelder

security-review

Audit codebases for vulnerabilities, misconfigurations, and secrets.

Community
Advanced
1J6K211J6K21

security-and-hardening

Harden web applications against OWASP Top 10 vulnerabilities with validation and secure defaults.

Community
Advanced
TECHKNOWMAD-LABSTECHKNOWMAD-LABS

security-audit

Scan code repositories for vulnerabilities and leaked secrets using static analysis tools.

Official
Advanced
cgRGMcgRGM
1

convex-security-audit

Audit Convex applications for authorization, data access, and action isolation issues.

Community
Advanced