security-secure-coding

Enforces secure-coding review checklists across code changes involving endpoints and parsers.

7|Updated Feb 14, 2026
One-click install
npx skills add https://github.com/KentoShimizu/sw-agent-skills --skill security-secure-coding
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-secure-coding
Source: https://github.com/KentoShimizu/sw-agent-skills/tree/main/skills/security-secure-coding
Command: npx skills add https://github.com/KentoShimizu/sw-agent-skills --skill security-secure-coding

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve?

Prevents introducing insecure coding patterns by enforcing a security-focused workflow during implementation changes, ensuring vulnerabilities are caught early.

Core Features & Use Cases

  • Security review workflow: guides engineers through risk assessment, input validation, and safe data handling.
  • Checklist-driven audits: formalized checks using the secure-coding-review-checklist asset.
  • Use Case: when adding a new API endpoint, this skill enforces explicit authorization, validation, and safe deserialization patterns.

Quick Start

Start by identifying trust boundaries in the codebase and run the secure-coding-review-checklist to harden the implementation.

Frequently Asked Questions about security-secure-coding

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce secure coding practices when adding new API endpoints?

Enforce secure coding practices for new API endpoints by applying a security-focused workflow that mandates explicit authorization, input validation, and safe data deserialization patterns. This catches vulnerabilities early during implementation changes.

What is a secure coding checklist and when should I run it?

A secure coding checklist is a formalized audit tool used to harden implementations by validating risk assessment and safe data handling. Run it after identifying trust boundaries in your codebase to ensure secure-by-default development.

How do I perform threat modeling and risk assessment for new data handling logic?

Perform threat modeling for new data handling logic by identifying trust boundaries and following a guided security review workflow. This process assesses risks, validates inputs, and ensures safe deserialization before code changes are finalized.

Do I need a dedicated security workflow for parsers and deserializers?

Yes, introducing new parsers and deserializers requires a dedicated security workflow to prevent insecure coding patterns. This workflow guides engineers through formalized checks and safe data handling mitigations to catch vulnerabilities early.

What is the best way to review code changes for security vulnerabilities?

The best way to review code changes for security vulnerabilities is using a checklist-driven audit that validates input handling and authorization. This approach enforces secure-by-default practices and documents mitigations for identified risks.

Why does introducing new data handling logic require input validation checks?

Introducing new data handling logic requires input validation checks to prevent insecure coding patterns and ensure safe data processing. Enforcing these checks early protects trust boundaries and mitigates potential vulnerabilities before deployment.