Security Checklist

关于

This skill provides a comprehensive framework for building secure applications by offering domain-specific guidance on OWASP Top 10 vulnerabilities, authentication patterns, and input validation strategies. It empowers developers to identify and mitigate security risks during audits, feature implementation, or system hardening. By integrating automated scanning tool recommendations for Node.js and Python, the skill ensures that applications remain resilient against common threats like injection, broken access control, and cryptographic failures while maintaining compliance with standards like GDPR and SOC2.

主要功能

• Security header configuration guidelines for defense-in-depth protection
• Secure authentication patterns including JWT, argon2 hashing, and session management
• OWASP Top 10 mitigation strategies and code-level implementation examples
• 6 GitHub stars
• Comprehensive input validation and sanitization strategies for various data types
• Automated security scanning integration using tools like Semgrep, Bandit, and TruffleHog

使用场景

• Conducting security audits or reviews on existing codebases
• Hardening applications against common vulnerabilities prior to production deployment
• Implementing secure authentication and authorization systems