What problem does it solve? Writing security-critical code requires knowing the correct, current defenses against vulnerabilities like SQL injection, XSS, path traversal, SSRF, and CSRF, plus modern requirements like post-quantum cryptography and MCP server hardening. This Skill provides verified, copy-ready secure code patterns so engineers avoid shipping exploitable implementations. ## Core Features & Use Cases - Vulnerability-Specific Input Validation: Parameterized queries, DOMPurify sanitization, path containment checks, SSRF domain allowlists, and CSRF token verification across Python, TypeScript, Rust, and Go. - Authentication & Cryptography: ML-DSA-65 token signing, RBAC middleware for FastAPI and Express, AES-256-GCM encryption, Argon2id password hashing, HKDF key derivation, and TLS 1.3 configuration. - Supply Chain & Container Security: SBOM generation, SLSA provenance in GitHub Actions, dependency pinning, non-root Dockerfiles, and Kubernetes pod security policies. - MCP Security Hardening: Manifest signing, tool drift detection, rate limiting, and output sanitization mapped to real CVEs. - Use Case: When building a FastAPI endpoint that accepts user input and queries a database, load this Skill to get the parameterized query pattern, RBAC decorator, and CSRF validation code in one pass. ## Quick Start Use the code-security skill to write a FastAPI endpoint with SQL injection prevention, RBAC authorization, and Argon2id password hashing.
