domains / families / security / security-best-practices

security-best-practices

authentic

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

When to use

• security best practices guidance
• security review/report
• secure-by-default coding help
• passive vulnerability detection
• writing new secure code
• improving codebase security

When not to use

• general code review
• debugging
• non-security tasks
• unsupported languages

Skill page

Source