skills.rest
I2olanD
I2olanDCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vibe-security

Apply security best practices to web applications against OWASP Top 10 risks.

Updated Dec 28, 2025
Search Tags:#authorization#OWASP#authentication#input-validation#web-security#secure-coding
One-click install
npx skills add https://github.com/I2olanD/dotfiles --skill vibe-security-i2oland
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vibe-security
Source: https://github.com/I2olanD/dotfiles/tree/main/.config/opencode/skill/vibe-security
Command: npx skills add https://github.com/I2olanD/dotfiles --skill vibe-security-i2oland

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web applications often ship with security risks due to insufficient input validation, weak access controls, and missing protections against XSS, CSRF, SSRF, and injection. This Skill provides a practical, developer-focused guide to implement secure coding practices and defend against common vulnerabilities.

Core Features & Use Cases

  • Defensive coding patterns: enforce input validation, output encoding, secure defaults, and safe error handling.
  • Access control and session security: ensure per-user ownership, proper authorization checks, and robust token handling.
  • Coverage of OWASP Top 10 risks: XSS, CSRF, SSRF, injection, IDOR, and sensitive data exposure.
  • Use Case: while building a web API and frontend, apply these patterns to reduce vulnerability surface and speed secure delivery.

Quick Start

Start by auditing a sample endpoint for OWASP Top 10, implement the recommended fixes, and integrate security checks into your CI/CD workflow.

Frequently Asked Questions about vibe-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I protect my web API from XSS, CSRF, and SSRF attacks?▼

To protect web APIs from XSS, CSRF, and SSRF attacks, apply secure coding practices like input validation, output encoding, and safe error handling during feature development and code reviews to align with OWASP standards.

What is the best way to implement authorization and authentication checks for web applications?▼

Implementing authorization and authentication checks requires enforcing per-user ownership, proper access controls, and robust token handling to prevent IDOR and unauthorized access in your web application backend.

Does secure coding for web apps work without external security dependencies?▼

Yes, secure coding for web apps can be applied without external dependencies by integrating defensive patterns like input validation and output encoding directly into your feature development and API workflows.

How do I audit web application endpoints for injection vulnerabilities?▼

Audit web application endpoints for injection vulnerabilities by reviewing code against OWASP Top 10 risks, checking input validation, and verifying safe error handling before integrating checks into your CI/CD workflow.

When do I need to apply secure coding practices during web app development?▼

Apply secure coding practices during web app development when building API backends, developing frontend features, conducting code reviews, and performing deployment migrations to reduce vulnerability surface.

Related Skills

Explore More Software Engineering Skills→
snoodleboot-iosnoodleboot-io
2

api-security

Implement authentication, authorization, rate limiting, and input validation for API endpoints.

Official
Intermediate
pacphipacphi
6

security-testing

Identify and validate security vulnerabilities in software applications.

Community
Advanced
boomNDSboomNDS

API Integration Specialist

Integrate REST and GraphQL APIs with OAuth, retries, and error handling.

Community
Basic
jcastillotxjcastillotx

SQLMap Database Penetration Testing

Automate SQL injection testing and database enumeration with SQLMap.

Community
Advanced