What problem does it solve? Writing secure code requires deep knowledge of language- and framework-specific security pitfalls, and manually auditing a codebase for vulnerabilities is slow and error-prone. This Skill loads curated security guidance for your stack and applies it to write secure-by-default code, passively flag critical issues, or produce a full prioritized security report. ## Core Features & Use Cases - Secure-by-default code generation: Automatically loads reference guidance for detected languages and frameworks (Python, JavaScript/TypeScript, Go) so new code follows security best practices from the start. - Passive vulnerability detection: Notices critical issues like SQL injection, XSS sinks, missing CSRF protection, or hardcoded secrets while working in your project and flags them with safe fixes. - Prioritized security reports: On request, produces a markdown report with severity-rated findings, numeric IDs, line-number references, and impact statements, then offers to fix findings one at a time without breaking existing functionality. - Use Case: Ask for a security review of your Express.js backend, and receive a report identifying missing Helmet headers, unsafe session cookie flags, and unvalidated redirect targets, each with a concrete minimal fix. ## Quick Start Review this project for security best practices and write a prioritized vulnerability report.
