skills.rest
gdurandvadas
gdurandvadasCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

standards-security

Enforce OWASP Top 10 protections for authentication, input validation, and sensitive data handling.

2|Updated Apr 10, 2024
Search Tags:#security#authentication#owasp#input-validation#data-protection#api-security#secure-coding
One-click install
npx skills add https://github.com/gdurandvadas/dotfiles --skill standards-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: standards-security
Source: https://github.com/gdurandvadas/dotfiles/tree/main/config/opencode/skills/standards-security
Command: npx skills add https://github.com/gdurandvadas/dotfiles --skill standards-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides security standards and actionable checklists to prevent common vulnerabilities and ensure consistent handling of authentication, input validation, and sensitive data across projects.

Core Features & Use Cases

  • OWASP Top 10 Protections: Guidance to mitigate injection, XSS, CSRF, and other common web vulnerabilities.
  • Authentication & Authorization Patterns: Recommendations for JWT handling, role-based checks, and secure session management.
  • Input Validation & Data Protection: Schemas, sanitization, environment variable handling, encryption, and logging best practices.
  • Use Case: Apply during code reviews, API design, or security audits to produce prioritized remediation checklists.

Quick Start

Ask the standards-security skill to review an API endpoint and produce a prioritized checklist of authentication, validation, and data protection fixes.

Frequently Asked Questions about standards-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce OWASP Top 10 protections during an API design review?▼

Enforce OWASP Top 10 protections by applying secure coding checklists that mitigate injection, XSS, and CSRF vulnerabilities during API design reviews. This generates prioritized remediation steps for application endpoints.

What is the best way to implement secure authentication and JWT handling patterns?▼

Implement secure authentication patterns by adopting recommendations for JWT handling, role-based authorization checks, and secure session management to ensure consistent access control across applications.

How do I set up input validation schemas and sensitive data encryption for APIs?▼

Set up input validation and sensitive data encryption by applying schemas, sanitization processes, and environment variable handling to protect application secrets and enforce data protection operational controls.

Can I use this to scan dependencies for security vulnerabilities during code audits?▼

Yes, you can use this to scan dependencies for vulnerabilities during code audits. The process requires checks for dependency vulnerability scanning alongside secure headers and rate limiting to ensure architecture integrity.

Does this approach apply to securing operational controls and environment variables in web apps?▼

Yes, securing operational controls applies directly to web apps by enforcing environment variable handling, encryption of secrets, and secure logging best practices to prevent unauthorized data exposure.

Related Skills

Explore More Software Engineering Skills→
0x53c70x53c7
1

endpoint-enumerator

Identify API endpoints and map their authentication and authorization controls.

Official
Advanced
JFrangelJFrangel

security-guard

Detects and remediates security vulnerabilities in code, infrastructure, and architecture using OWASP and DevSecOps standards for pre-production environments.

Community
Advanced
cenjiecenjie

api-security-hardening

Secure REST APIs with authentication, rate limiting, CORS, and input validation.

Community
Advanced
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced