What problem does it solve? Web development tasks often result in reinvented wheels, unvetted dependencies, and security gaps discovered too late. This Skill enforces a disciplined workflow that prioritizes evaluating existing solutions before writing code and embeds security checks at every stage of feature development. ## Core Features & Use Cases - Reuse-First Research: Systematically searches official docs, GitHub/GitLab, and package managers, then evaluates 2-5 candidate libraries on maintenance status, license, security policy, and stack compatibility. - Security-First Evaluation: Runs dependency CVE scans, static analysis, supply-chain assessment, and a lightweight STRIDE threat model before and during implementation. - Structured Delivery: Produces a design specification, secure-by-default implementation checklist (secrets management, input validation, CSP, rate limiting), mandatory test coverage, and a nine-section final report including residual risks and licensing. - Use Case: When asked to "implement user authentication" or "choose a library for file uploads", the Skill walks through candidate comparison, threat modeling, secure implementation, and delivers a documented report with residual risk analysis. ## Quick Start Ask the agent to implement a new web feature or evaluate a library using the reuse-first and security-first workflow, providing your tech stack and constraints.
