skills.rest
Barnhardt-Enterprises-Inc
Barnhardt-Enterprises-IncOFFICIAL
Explore all skills by this author →
GitHub

security-sentinel

Audit code for security vulnerabilities across authentication, input handling, and deployment workflows.

Updated Aug 27, 2026
Search Tags:#authorization#OWASP#security#authentication#validation#XSS#SQL injection
One-click install
npx skills add https://github.com/Barnhardt-Enterprises-Inc/quetrex-plugin --skill security-sentinel
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-sentinel
Source: https://github.com/Barnhardt-Enterprises-Inc/quetrex-plugin/tree/main/templates/skills/security-sentinel
Command: npx skills add https://github.com/Barnhardt-Enterprises-Inc/quetrex-plugin --skill security-sentinel

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security vulnerabilities can lead to data breaches, system compromise, and severe reputational damage. This Skill provides a comprehensive guide to implementing robust security best practices, protecting your application against common threats and ensuring compliance with industry standards.

Core Features & Use Cases

  • OWASP Top 10 Coverage: Addresses the most critical web application security risks with practical solutions and code examples, making complex security concepts actionable.
  • Authentication & Authorization Patterns: Guides on implementing secure user authentication, session management, and granular access control, protecting sensitive data and functionality.
  • Input Validation & Injection Prevention: Ensures all user input is rigorously validated and protects against common attacks like SQL injection and Cross-Site Scripting (XSS).
  • Use Case: When developing an authentication system, activate this Skill. It will guide you to ensure passwords are hashed correctly, JWTs are securely managed, and all login inputs are rigorously validated, preventing common authentication bypasses and protecting user data.

Quick Start

I am implementing a new API endpoint that accepts user input. What are the critical security checks I need to perform, especially regarding input validation and authorization?

Frequently Asked Questions about security-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my code for security vulnerabilities like SQL injection and XSS?▼

Code auditing for security vulnerabilities involves systematic scanning for injection flaws, broken authentication, and insecure data handling. This Skill performs 20+ automated checks covering OWASP Top 10 risks across API routes, user input handling, database queries, and authentication logic, identifying threats before deployment.

What are the critical security checks for validating user input in API endpoints?▼

Input validation prevents injection attacks by rigorously checking all user data against expected formats and constraints. This Skill guides you through implementing validation patterns, sanitizing inputs, and applying parameterized queries to block SQL injection and XSS attacks before data reaches your database or frontend.

How should I implement secure authentication and authorization in my application?▼

Secure authentication requires proper password hashing, session management, and JWT handling; authorization enforces granular access control. This Skill provides patterns for implementing these systems, covering secure credential storage, token lifecycle management, and access control validation to protect sensitive data and functionality.

What does OWASP Top 10 coverage mean and why does it matter for my application?▼

OWASP Top 10 identifies the most critical web application security risks including injection, broken authentication, and sensitive data exposure. This Skill addresses each category with practical solutions and code examples, helping you eliminate the highest-impact vulnerabilities that commonly lead to data breaches and system compromise.

Can I use this for pre-deployment security checklists and remediation guidance?▼

Yes. This Skill integrates with pre-deployment workflows, providing automated vulnerability scanning results and actionable remediation guidance. It supports security checklist validation before release, ensuring your application meets security requirements before going live.

What file operations and secrets management does this Skill cover?▼

This Skill audits file operations for unsafe access patterns and scans deployment workflows for exposed secrets, credentials, and API keys. It identifies misconfigurations in secret storage and access, preventing credential leaks in code repositories and configuration files.

Related Skills

Explore More Software Engineering Skills→
cenjiecenjie

penetration-testing

Identify and validate security vulnerabilities through simulated attacks on applications and networks.

Community
Advanced
stephanjstephanj
9

security-reviewer

Conducts security audits and vulnerability assessments on codebases and infrastructure.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced
tykisgodtykisgod
10

codex-code-review

Automate Unity C# code review with Codex CLI and verified findings.

Community
Advanced