security-baseline

Provide OWASP-aware security rules and vulnerability patterns for codebases.

11|1|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/mindcockpit-ai/cognitive-core --skill security-baseline-mindcockpit-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-baseline
Source: https://github.com/mindcockpit-ai/cognitive-core/tree/main/core/skills/security-baseline
Command: npx skills add https://github.com/mindcockpit-ai/cognitive-core --skill security-baseline-mindcockpit-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Provide developers with built‑in security awareness, preventing common vulnerabilities by offering OWASP‑aligned rules and language‑specific best practices.

Core Features & Use Cases

  • Universal security rules such as no hard‑coded credentials, input validation, and least‑privilege.
  • Language‑specific guidance for Python, JavaScript/TypeScript, Go, Perl, Rust, Java, C#.
  • Integration with cognitive‑core hooks that enforce these rules during code generation and review.
  • Reference material covering OWASP LLM Top 10 coverage.

Quick Start

Request the security baseline skill to display the OWASP checklist for your project.

Frequently Asked Questions about security-baseline

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my codebase for OWASP vulnerabilities during code review?▼

To prevent hard-coded credentials and unsafe queries, apply OWASP-aligned security rules that flag insecure coding patterns during generation and review. This enforces universal practices like input validation and least-privilege across your codebase.

What are the best secure coding guidelines for Python and JavaScript projects?▼

The best secure coding guidelines for Python and JavaScript provide language-specific best practices aligned with OWASP standards. They enforce universal security rules including input validation, least-privilege, and blocking unsafe queries during development.

Does this security baseline support Go and Java codebases?▼

Yes, this security baseline supports Go and Java codebases by delivering language-specific guidelines during coding sessions. It applies OWASP-aware security rules across languages including Python, JavaScript, TypeScript, Go, Rust, Java, and C#.

What is the OWASP LLM Top 10 checklist for secure software development?▼

The OWASP LLM Top 10 checklist provides reference material covering vulnerability patterns and security rules for software projects. It ensures insecure practices like missing input validation and hard-coded credentials are flagged and mitigated.

How do I prevent hard-coded credentials and unsafe queries in my code?▼

To prevent hard-coded credentials and unsafe queries, apply OWASP-aware security rules that flag insecure practices during code generation and review. This enforces universal rules including input validation and least-privilege across your codebase.