Apply secure-by-default practices to input validation, authorization, and system hardening.
npx skills add https://github.com/PVPha/agent_skills --skill security-pvpha
Please help me install this Agent Skill. Skill: security Source: https://github.com/PVPha/agent_skills/tree/main/skills/security Command: npx skills add https://github.com/PVPha/agent_skills --skill security-pvpha
This Skill helps engineers design, implement, and review code with secure-by-default practices, significantly reducing exploitable risks in application and infrastructure code.
Apply secure-by-default engineering practices for input validation, authz, secrets, dependencies, and hardening.
High-intent search queries and answers about installing and using this skill.
Secure input validation ensures untrusted external input is validated against defined schemas. This prevents malicious payloads from compromising your API endpoints by enforcing strict data conformity before processing.
Least privilege authorization guides the implementation of minimum necessary permissions for users and services. This reduces attack surface by ensuring entities only access resources explicitly required for their operations.
Preventing injection vulnerabilities requires implementing specific defense patterns for SQL, NoSQL, and shell commands. This Skill provides secure coding paradigms that separate code from untrusted input to block injection attacks.
Secure failure modes promote fail-secure mechanisms that avoid leaking sensitive information in application errors. This ensures system hardening by defaulting to a safe state during unexpected crashes or authorization failures.
Secure coding practices address risks across both application and infrastructure code. You can apply system hardening, dependency hygiene, and secrets management to reduce exploitable vulnerabilities throughout your entire engineering stack.
rohanbhatia27Analyze APIs and configurations for security vulnerabilities using Python.
wichan7Perform STRIDE threat modeling and DREAD scoring for security assessments.
NoobyGainsEnforce code quality standards across pre-commit, pre-merge, and CI pipeline stages.
marquesfelipImplement multi-layer DDoS defense for web services and APIs.
