skills.rest
ForeverWorld
ForeverWorldCOMMUNITY
Explore all skills by this author →
GitHub

security-best-practices

Review Python, JavaScript/TypeScript, and Go codebases for security risks and remediation guidance.

Updated Aug 23, 2026
Search Tags:#security#guidance#multi-language#best-practices#code-review#secure-by-default
One-click install
npx skills add https://github.com/ForeverWorld/curdx-ralph --skill security-best-practices-foreverworld
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/ForeverWorld/curdx-ralph/tree/main/skills/security-best-practices
Command: npx skills add https://github.com/ForeverWorld/curdx-ralph --skill security-best-practices-foreverworld

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a comprehensive framework for performing language- and framework-specific security best-practice reviews, enabling teams to identify issues, apply guardrails, and adopt secure-by-default coding patterns across multi-language codebases.

Core Features & Use Cases

  • Load language-specific security references (Python, JavaScript/TypeScript, Go) to guide secure coding decisions.
  • Generate actionable security checklists, vulnerability findings, and remediation guidance for real-world codebases.
  • Produce secure-by-default templates and example mitigations that can be adapted to typical project workflows.

Quick Start

Run a language-aware security review and apply secure-by-default changes across the repository.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security code review across multi-language codebases?▼

To perform a multi-language security code review, load language-specific references for Python, JavaScript/TypeScript, and Go to assess risk, identify vulnerabilities, and generate actionable remediation guidance.

What are secure-by-default coding patterns and when do I need them?▼

Secure-by-default coding patterns enforce baseline security guardrails during development. You need them when adopting secure coding standards across multi-language repositories to proactively prevent common vulnerabilities.

Can I use this security guidance for both Python and Go projects?▼

Yes, this security guidance supports Python, JavaScript/TypeScript, and Go projects. It loads language-specific references to conduct risk scoring and produce tailored mitigations for each environment.

How do I generate remediation guidance and secure templates for vulnerability findings?▼

Generate remediation guidance by running language-aware security reviews to produce vulnerability findings, actionable checklists, and secure-by-default templates that adapt directly to typical project workflows.

What is the best way to assess security risk in JavaScript and TypeScript codebases?▼

The best way to assess security risk in JavaScript and TypeScript codebases is to apply multi-language security best-practices, utilizing risk scoring and framework-specific references to evaluate and mitigate identified issues.

Are there limitations when applying secure-by-default changes across different programming languages?▼

The primary limitation is language coverage: secure-by-default changes and risk scoring are currently supported only for Python, JavaScript/TypeScript, and Go projects, requiring specific reference loading for each.

Related Skills

Explore More Software Engineering Skills→
JetBrainsJetBrains
302

security-best-practices

Identify and apply language-specific security best practices for Python, JavaScript/TypeScript, and Go.

Official
Advanced
EstomEstom

security-best-practices

Analyze Python, JavaScript/TypeScript, and Go codebases for security best practices.

Community
Advanced
leonardoteodorooleonardoteodoroo

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for CI/CD security scanning.

Community
Advanced
jmolzjmolz

security-best-practices

Review codebases for security vulnerabilities and generate improvement suggestions.

Community
Advanced