Security Skill

Audit web and backend codebases against OWASP Top 10 security checks.

370|33|Updated Dec 14, 2025
One-click install
npx skills add https://github.com/nth5693/gemini-kit --skill security-skill-nth5693
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Skill
Source: https://github.com/nth5693/gemini-kit/tree/main/skills/security
Command: npx skills add https://github.com/nth5693/gemini-kit --skill security-skill-nth5693

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Automates security auditing and secure coding practices for software projects.

Core Features & Use Cases

  • OWASP Top 10 checks: injections, authentication flaws, XSS, CSRF, and security headers across web and backend codebases.
  • Secure coding patterns: parameterized queries, bcrypt hashing, and proper token management.
  • Use Case: Verify secure implementations in a Node.js/TypeScript project by auditing APIs and data handling.

Quick Start

Follow the examples in the Skill to review a sample code path and apply secure patterns in your environment.

Frequently Asked Questions about Security Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate a security audit for OWASP Top 10 vulnerabilities in a Node.js codebase?

Automating an OWASP Top 10 security audit involves checking web and backend codebases for injection flaws, XSS, CSRF, and missing security headers. This Skill reviews API and data handling paths to verify secure implementations.

What are parameterized queries and bcrypt hashing used for in secure coding?

Parameterized queries prevent database injection attacks by separating SQL code from data, while bcrypt hashing securely stores user passwords. These concrete patterns ensure safe data handling and authentication in backend projects.

Can I use this security audit approach with a TypeScript project?

Yes, you can verify secure implementations in a Node.js/TypeScript project by auditing APIs and data handling. The approach applies standard secure coding patterns across both web and backend codebases.

What's the best way to check for authentication flaws and CSRF vulnerabilities in web applications?

The best way to check for authentication flaws and CSRF vulnerabilities is to audit code against standard OWASP Top 10 checks. This process identifies weaknesses in token management and validates proper security header implementations.

When do I need to review security headers and token management in my application?

You need to review security headers and token management when auditing web and backend codebases for OWASP Top 10 compliance. This ensures proper authentication controls and protection against cross-site scripting and request forgery.