What problem does it solve? It prevents common security failures such as leaked secrets in git, SQL injection, XSS, weak password hashing, and vulnerable dependencies by enforcing concrete security checks across every project. ## Core Features & Use Cases - Secrets Management: Enforces .gitignore rules, .env.example templates, and correct handling of client-exposed environment variables like VITE_* and NEXT_PUBLIC_*. - Automated Security Testing: Provides pre-commit hooks with detect-secrets, npm audit, safety, bandit, and a GitHub Actions workflow with TruffleHog and CodeQL. - OWASP Input Validation: Covers parameterized queries, XSS sanitization with DOMPurify, Zod/Pydantic schema validation, and path traversal prevention. - Use Case: Before merging a pull request, run the security checklist to verify no secrets are committed, dependencies pass audits, authentication uses bcrypt and short-lived JWTs, and rate limiting protects auth endpoints. ## Quick Start Apply the security skill to audit my project for exposed secrets, vulnerable dependencies, and missing input validation.
