Security Best Practices

What it does

This skill helps AI agents identify and apply security best practices when working with specific programming languages and frameworks. It analyzes the project context to determine relevant technologies, then consults its internal reference directory for applicable security guidelines. The skill can be used to write secure code from the start, passively detect vulnerabilities, or generate detailed vulnerability reports with suggested fixes.

When to use it

• When starting a new software project and wanting to ensure secure coding practices from the beginning.
• While writing code in an existing project to proactively identify potential security flaws.
• To request a comprehensive security report for an existing codebase, highlighting vulnerabilities and suggesting remediation steps.
• When developing web applications that include both frontend and backend components.

Key capabilities

• Language & Framework Identification: Automatically detects the programming languages and frameworks used in a project's context.
• Reference Directory Lookup: Accesses a directory of security best practices documentation, organized by language, framework, and stack.
• Secure Code Generation: Writes code that adheres to identified security guidelines.
• Passive Vulnerability Detection: Identifies critical vulnerabilities or deviations from secure defaults while coding.
• Vulnerability Reporting: Generates prioritized reports detailing security shortcomings with severity and urgency classifications, and offers to implement fixes.

Example prompts

• "What are the security best practices for developing a React frontend application?"
• "Can you review this code snippet for potential vulnerabilities in Python?"
• "Generate a security report for our Node.js backend."

Tips & gotchas

• The skill relies on identifying the correct languages and frameworks being used; ensure accurate identification for optimal results.
• If no specific documentation is found, the skill will attempt to leverage general knowledge of secure coding practices.