What problem does it solve? Writing secure code and catching vulnerabilities requires deep, framework-specific knowledge that is easy to miss during everyday development. This Skill loads curated security guidance for the languages and frameworks in your project so code is written securely by default and existing issues are detected and reported. ## Core Features & Use Cases - Secure-by-default code generation: Identifies the languages and frameworks in your project (Go, Express, frontend JavaScript/TypeScript, and more) and applies matching security rules while writing new code. - Passive vulnerability detection: Flags critical issues such as SQL injection, XSS sinks, CSRF gaps, path traversal, SSRF, and weak cryptography while working in a codebase. - Prioritized security reports: On request, produces a severity-organized Markdown report with numeric finding IDs, line-number references, impact statements, and safe fix suggestions. - Use Case: Ask for a security review of an Express backend and receive a report covering session configuration, CSRF protection, CORS policy, and dependency hygiene, then have each finding fixed one at a time with regression-safe changes. ## Quick Start Ask the assistant to perform a security review of this repository and write a prioritized vulnerability report.
