Security Best Practices

What it does

This skill equips AI agents with foundational knowledge to identify, evaluate, and mitigate common cybersecurity threats. It enables agents to analyze system vulnerabilities, recommend secure configurations, and enforce protection strategies against attacks like phishing or malware.

When to use it

• Auditing an application's security posture before deployment.
• Generating incident response plans for suspected data breaches.
• Advising on the implementation of multi-factor authentication (MFA).
• Reviewing code repositories for potential injection flaws.

Key capabilities

• Threat modeling and risk assessment frameworks.
• Identification of OWASP Top 10 vulnerabilities.
• Recommendations for encryption standards and key management.
• Guidance on secure network architecture and firewall rules.
• Best practices for access control and identity management.

Example prompts

• "Analyze this Python script and list any potential SQL injection vulnerabilities."
• "Create a checklist for securing a new cloud-based SaaS platform against DDoS attacks."
• "Explain how to implement zero-trust architecture for a remote workforce."

Tips & gotchas

Ensure the AI agent has access to up-to-date threat intelligence feeds, as security practices evolve rapidly. While this skill provides strong theoretical guidance, it should be validated by human security experts for critical infrastructure decisions.