Can this skill help with data privacy and PII?

Yes, it includes best practices for minimizing PII collection, masking sensitive data in logs, and implementing encryption standards like AES-256.

How does this skill help mitigate OWASP Top 10 risks?

The skill provides specific code patterns and mitigation strategies for common risks like Injection, Broken Access Control, and Cross-Site Scripting (XSS).

Does it provide guidance on authentication?

Absolutely. It covers secure token handling, credential storage best practices, and the proper use of headers for authentication versus resource identification.

Is this skill limited to a specific programming language?

No, while examples are provided in Java, the fundamental security principles and patterns are applicable across all modern programming languages and frameworks.

Security Best Practices

Name: Security Best Practices
Author: violetio

byvioletio

セキュリティとテスト

Implements core security principles and defensive programming patterns to safeguard applications against common vulnerabilities.

概要

The Security Best Practices skill equips Claude with a comprehensive framework for applying security fundamentals throughout the software development lifecycle. It provides domain-specific guidance on defense-in-depth strategies, least privilege access, and secure-by-default configurations. By integrating OWASP Top 10 awareness with specific implementation patterns for authentication, authorization, and data protection, it helps developers build resilient systems that properly handle input validation, PII masking, and secure logging.

主な機能

Multi-layered authorization and role-based access control (RBAC)
0 GitHub stars
Comprehensive input validation and output encoding techniques
OWASP Top 10 mitigation strategies and implementation patterns
Secure logging and monitoring for threat detection
Sensitive data protection including PII masking and encryption

ユースケース

Auditing codebases for security misconfigurations and credential handling
Hardening API endpoints against injection attacks and broken authentication
Designing secure data retention and encryption-at-rest policies

概要

主な機能

Multi-layered authorization and role-based access control (RBAC)
0 GitHub stars
Comprehensive input validation and output encoding techniques
OWASP Top 10 mitigation strategies and implementation patterns
Secure logging and monitoring for threat detection
Sensitive data protection including PII masking and encryption

ユースケース

Auditing codebases for security misconfigurations and credential handling
Hardening API endpoints against injection attacks and broken authentication
Designing secure data retention and encryption-at-rest policies