security-patterns

Enforce security patterns for Kailash SDK development with OWASP compliance.

1|Updated Mar 7, 2026
One-click install
npx skills add https://github.com/terrene-foundation/kailash-coc-claude-rs --skill security-patterns-terrene-foundation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/terrene-foundation/kailash-coc-claude-rs/tree/main/.claude/skills/18-security-patterns
Command: npx skills add https://github.com/terrene-foundation/kailash-coc-claude-rs --skill security-patterns-terrene-foundation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses critical security vulnerabilities in application development by providing mandatory patterns and best practices for secure coding, preventing common exploits like injection attacks and secret exposure.

Core Features & Use Cases

  • Secret Management: Enforces the use of environment variables instead of hardcoded credentials.
  • Input Validation: Guides on validating all user inputs to prevent injection attacks.
  • Secure API Calls: Mandates the use of HTTPS for all external API communications.
  • OWASP Compliance: Provides guidance on preventing common OWASP Top 10 vulnerabilities.
  • Use Case: When developing a new feature that accepts user input or interacts with external APIs, consult this Skill to ensure all security best practices are followed, such as validating input and using secure endpoints.

Quick Start

Use the security-patterns skill to ensure all API calls are made over HTTPS.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and credential exposure in application development?

To prevent SQL injection and credential exposure, you must validate all user inputs and manage secrets via environment variables. Enforcing secure coding patterns mitigates these common OWASP vulnerabilities effectively.

What are the best practices for secret management and preventing hardcoded credentials?

Best practices for secret management mandate using environment variables instead of hardcoded credentials within your codebase. This approach prevents accidental secret exposure and secures API calls during application development.

How do I ensure secure API calls and OWASP compliance for external endpoints?

To ensure secure API calls and OWASP compliance, mandate HTTPS for all external API communications. This prevents insecure data transmission and protects against common OWASP Top 10 vulnerabilities.

Does secure coding require input validation for all user inputs to stop injection attacks?

Yes, secure coding requires input validation for all user inputs to stop injection attacks. Validating user inputs is a mandatory rule to prevent malicious data from exploiting vulnerabilities like SQL injection.

When do I need to follow OWASP Top 10 vulnerability prevention guidelines?

You need to follow OWASP Top 10 vulnerability prevention guidelines whenever developing features that accept user input or interact with external APIs. This ensures all security best practices are applied to prevent common exploits.