Security Standards

Enforce security protocols for secure coding and data protection.

51|6|Updated Mar 28, 2019
One-click install
npx skills add https://github.com/Mte90/dotfiles --skill security-standards-mte90
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Security Standards
Source: https://github.com/Mte90/dotfiles/tree/main/.config/opencode/skills/common/security-standards
Command: npx skills add https://github.com/Mte90/dotfiles --skill security-standards-mte90

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides essential security protocols and best practices to prevent common vulnerabilities and ensure software resilience against threats.

Core Features & Use Cases

  • Secure Coding: Implements practices to prevent injections, manage dependencies, and secure authentication.
  • Data Protection: Enforces principles like Zero Trust, Least Privilege, and secure data handling (encryption, PII logging).
  • Use Case: A developer can use this skill to ensure their new API endpoint properly sanitizes user input, uses parameterized queries, and avoids hardcoding secrets, thereby preventing common security breaches.

Quick Start

Apply the security standards to ensure all user inputs are validated and sanitized before processing.

Frequently Asked Questions about Security Standards

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent injection attacks and hardcoded secrets in my codebase?

To prevent injection attacks and hardcoded secrets, apply secure coding practices by validating user inputs, using parameterized queries, and managing dependencies properly. These standards enforce remediation patterns to eliminate critical vulnerabilities.

What are the best secure coding practices for building resilient software APIs?

Secure coding practices for resilient software APIs involve enforcing Zero Trust and Least Privilege principles. They ensure proper input sanitization, secure authentication, and safe data handling to prevent common security breaches.

How does data protection encryption work for sensitive PII logging?

Data protection encryption for sensitive PII logging works by enforcing secure data handling protocols that safeguard information through encryption. This prevents unauthorized access and ensures continuous security monitoring of critical data.

Do I need to configure continuous security monitoring to enforce authorization protocols?

Yes, continuous security monitoring is needed to enforce authorization and authentication protocols effectively. It ensures ongoing compliance with universal security standards and helps identify emerging vulnerabilities in real-time.

Why does my software still have insecure defaults after implementing basic authentication?

Software retains insecure defaults after basic authentication because it lacks comprehensive secure coding protocols. Addressing this requires applying defined remediation patterns and Zero Trust principles to eliminate hardcoded secrets and validate inputs.