skills.rest
warrencammack
warrencammackCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security

Enforce OWASP security patterns, manage secrets, and automate security testing.

1|Updated Apr 13, 2025
Search Tags:#security#owasp#secure coding#secrets management#dependency audit#vulnerability scanning
One-click install
npx skills add https://github.com/warrencammack/qnap --skill security-warrencammack
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/warrencammack/qnap/tree/main/.claude/skills/security
Command: npx skills add https://github.com/warrencammack/qnap --skill security-warrencammack

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill establishes and enforces robust security practices across your projects, preventing common vulnerabilities and protecting sensitive information.

Core Features & Use Cases

  • Secrets Management: Detects and prevents accidental commits of secrets and sensitive data.
  • Dependency Auditing: Scans project dependencies for known vulnerabilities.
  • Secure Coding Practices: Provides guidelines and checks for preventing common web vulnerabilities like SQL injection and XSS.
  • Use Case: Before merging code, this Skill automatically runs checks to ensure no API keys are exposed, dependencies are up-to-date, and common security anti-patterns are avoided, significantly reducing the risk of breaches.

Quick Start

Run the security skill to perform a comprehensive security audit on the current project.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent secrets and API keys from being committed to git?▼

Prevent secrets from being committed by configuring gitignore rules and validating environment variables. This approach detects accidental commits of sensitive data, ensuring API keys remain protected before code merges.

What is the best way to automate dependency vulnerability scanning before merging code?▼

Automate dependency vulnerability scanning using GitHub Actions workflows and pre-commit hooks. This scans project dependencies for known vulnerabilities, ensuring dependencies are up-to-date and secure before merging code.

How do I enforce secure coding patterns for SQL injection and XSS in my project?▼

Enforce secure coding patterns for SQL injection and XSS by applying OWASP security guidelines. This provides input validation checks to prevent common web vulnerabilities, significantly reducing breach risks during development.

Can I use GitHub Actions workflows to enforce authentication best practices like JWT and password hashing?▼

Yes, you can use GitHub Actions workflows to enforce authentication best practices. This validates JWT implementations, password hashing, and rate limiting configurations to protect authentication flows in your software projects.

Does automated security testing cover path traversal vulnerabilities?▼

Yes, automated security testing covers path traversal vulnerabilities. It enforces OWASP security patterns by validating file path inputs, preventing malicious directory navigation attempts across your software projects.

Related Skills

Explore More Software Engineering Skills→
az9713az9713

dark-code-suite-init

Initialize a project with dark code prevention directories, CLAUDE.md section, and baseline audit.

Community
Intermediate
nirajrathod19nirajrathod19

fetch-deployment-logs

Fetch and analyze Repl deployment logs with regex filtering.

Community
Intermediate
ollieb89ollieb89

sast-configuration

Configures SAST tools like Semgrep, SonarQube and CodeQL for automated vulnerability detection in CI/CD pipelines.

Community
Advanced
reverb256reverb256

firewall-config

Configure iptables, nftables, UFW, and cloud provider firewalls.

Community
Advanced