security

Integrate authentication, authorization, and input validation into Go, Python, and React applications.

3|Updated Mar 22, 2026
One-click install
npx skills add https://github.com/vndee/engineering-skills --skill security-vndee
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/vndee/engineering-skills/tree/main/.claude/skills/security
Command: npx skills add https://github.com/vndee/engineering-skills --skill security-vndee

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security engineering is foundational; this guide helps teams bake authentication, authorization, input validation, and hardening into Go, Python, and React apps from the start.

Core Features & Use Cases

  • Authentication patterns (JWTs, API keys, and session-based flows) to verify identities.
  • Authorization controls (RBAC/ABAC) to enforce permissions at resource boundaries.
  • Input handling and validation to prevent common vulnerabilities and ensure data integrity.
  • Security hygiene (secure headers, secret management, and pre-deploy security checks) to harden deployments.

Quick Start

Integrate authentication middleware and authorization checks across your Go, Python, or React project to enforce security boundaries immediately.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement JWT authentication and RBAC authorization in Go and Python APIs?

Authentication and authorization are implemented by integrating middleware that enforces JWT or API key verification alongside RBAC checks at resource boundaries in Go and Python API services.

What's the best way to add input validation and secure headers to React frontends?

Input validation and secure headers are applied across React web frontends through built-in input sanitation and hardening mechanisms to prevent common vulnerabilities and ensure data integrity.

Can I use this approach to secure microservices with API key verification?

API key verification is fully supported for microservices, applying identity verification and access control specifically to distributed Go and Python service boundaries.

Does this cover session-based login flows or only token-based authentication?

Both token-based and session-based login flows are covered, applying JWT verification, API key checks, and session validation to verify identities across application stacks.

How do I enforce safe defaults and error handling for threat mitigation?

Threat mitigation is enforced by applying secure error handling with safe defaults and input sanitation, preventing common vulnerabilities across API services and web frontends.

What pre-deploy security checks and secret management practices are included?

Pre-deploy security checks and secret management are included as security hygiene practices, hardening deployments by integrating secure headers and safe configuration handling.