What problem does it solve? Writing secure code requires deep, up-to-date knowledge of each language and framework's security pitfalls, and manually auditing a codebase for vulnerabilities is slow and error-prone. This Skill loads curated security guidance for Python, JavaScript/TypeScript, and Go so reviews and secure-by-default coding happen consistently. ## Core Features & Use Cases - Secure-by-default code generation: Identifies the languages and frameworks in your project and applies matching security rules (e.g., Express cookie flags, Go http.Server timeouts, frontend DOM XSS sinks) while writing new code. - Passive vulnerability detection: Flags critical issues like SQL injection, missing CSRF protection, or hardcoded secrets as it works in your codebase. - Prioritized security reports: On request, produces a severity-organized vulnerability report with numeric IDs, line-number references, impact statements, and safe fix suggestions. - Use Case: Ask for a security review of your Express backend and receive a report citing missing CSRF middleware, insecure session cookie flags, and unbounded body parsing, each with a minimal safe fix. ## Quick Start Ask the assistant to perform a security best-practices review of this project and produce a prioritized vulnerability report.
