security-practices

Implement secure software development practices covering OWASP Top 10 vulnerabilities.

20|5|Updated Jan 5, 2026
One-click install
npx skills add https://github.com/miles990/claude-software-skills --skill security-practices-miles990
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-practices
Source: https://github.com/miles990/claude-software-skills/tree/main/software-engineering/security-practices
Command: npx skills add https://github.com/miles990/claude-software-skills --skill security-practices-miles990

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses critical security vulnerabilities in software development, helping you prevent common attacks and protect sensitive data.

Core Features & Use Cases

  • OWASP Top 10 Mitigation: Provides code examples and explanations for addressing the most critical web application security risks.
  • Secure Authentication & Authorization: Implements best practices for JWT, OAuth, RBAC, and ABAC.
  • Secrets Management & Input Validation: Guides on securely handling secrets and validating user input to prevent injection attacks.
  • Use Case: A developer needs to implement secure login functionality. They can refer to the "Broken Authentication" section for password hashing, rate limiting, and JWT best practices.

Quick Start

Apply secure coding practices by reviewing the OWASP Top 10 vulnerabilities and their mitigation strategies.

Frequently Asked Questions about security-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I mitigate OWASP Top 10 vulnerabilities in my web application?

To mitigate OWASP Top 10 vulnerabilities, apply secure coding practices like input validation, proper secrets management, and robust authentication mechanisms. This Skill provides code examples and explanations for addressing the most critical web application security risks.

What is the best way to implement secure authentication and authorization?

The best way to implement secure authentication and authorization is by following best practices for JWT, OAuth, RBAC, and ABAC. This Skill guides you through password hashing, rate limiting, and secure token management to prevent broken authentication.

How does input validation prevent injection attacks?

Input validation prevents injection attacks by sanitizing and constraining user input before it reaches backend systems. This Skill provides guidance on securely handling secrets and validating input to protect your application from malicious data execution.

When do I need secrets management in software development?

You need secrets management in software development whenever handling sensitive data like API keys, tokens, or database credentials. This Skill guides you on securely storing and managing these secrets to prevent unauthorized access and data breaches.

Can I use this secure coding guidance for any programming language?

Yes, the secure coding guidance applies generally across platforms, focusing on universal concepts like OWASP Top 10 mitigation, RBAC, and ABAC. It provides foundational strategies and code examples adaptable to your specific development environment.

What are the limitations of relying on standard secure coding practices?

Standard secure coding practices require continuous updates to address emerging threats beyond established OWASP Top 10 vulnerabilities. Developers must actively integrate these strategies into their workflow and adapt them to specific application architectures.