security-patterns

Check Brainbase code for XSS, CSRF, and input validation vulnerabilities.

9|Updated Nov 22, 2025
One-click install
npx skills add https://github.com/Unson-LLC/brainbase --skill security-patterns-unson-llc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/Unson-LLC/brainbase/tree/main/.claude/skills/security-patterns
Command: npx skills add https://github.com/Unson-LLC/brainbase --skill security-patterns-unson-llc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Brainbaseのセキュリティパターン(XSS Prevention、CSRF Protection、Input Validation)への準拠を自動で評価し、潜在的脆弱性を検出して修正提案を生成します。

Core Features & Use Cases

  • Phase 1〜3の検査をオーケストレーションし、XSS/CSRF/入力検証の違反箇所を特定
  • CLAUDE.md で定義されたセキュリティパターンの実装検証とレポート作成
  • Subagents(phase1_xss_checker.md、phase2_csrf_checker.md、phase3_input_validation_checker.md)を活用して段階的に判断
  • Gitベースの開発ワークフローへ統合し、修正提案をキュー化して共有

Quick Start

Run the security-patterns skill to audit a codebase for XSS, CSRF, and input validation patterns and generate a remediation report.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect XSS and CSRF vulnerabilities in my codebase?

To detect XSS and CSRF vulnerabilities, this Skill audits frontend and backend code across three phases using dedicated subagents for XSS, CSRF, and input validation checks. It identifies violations of security patterns and reports actionable fixes.

How do I automate input validation checks during code review?

You automate input validation checks by running this Skill during development or review. It orchestrates phase-specific subagents to evaluate your code against defined security patterns and queues remediation suggestions for your team.

What is the best way to enforce security patterns in a Git workflow?

The best way to enforce security patterns in a Git workflow is integrating this Skill. It audits code for XSS, CSRF, and input validation compliance, then generates and queues remediation reports directly into your development process.

Can I use this vulnerability detection tool for both frontend and backend code?

Yes, you can use this vulnerability detection tool for both frontend and backend codebases. It evaluates security pattern adherence across the entire stack, checking for XSS, CSRF, and input validation flaws during development.

How does automated vulnerability detection work for security pattern adherence?

Automated vulnerability detection works by loading SKILL.md metadata and orchestrating three phase-specific subagents that check code against defined XSS, CSRF, and input validation security patterns. It then outputs actionable remediation suggestions.