domains / families / security / secure-code-guardian

secure-code-guardian

separate

Use when implementing authentication/authorization, securing user input, or preventing OWASP Top 10 vulnerabilities — including custom security implementations such as hashing passwords with bcrypt/argon2, sanitizing SQL queries with parameterized statements, configuring CORS/CSP headers, validating input with Zod, and setting up JWT tokens. Invoke for authentication, authorization, input validation, encryption, OWASP Top 10 prevention, secure session management, and security hardening. For pre-built OAuth/SSO integrations or standalone security audits, consider a more specialized skill.

When to use

• implementing authentication/authorization
• securing user input
• preventing OWASP Top 10 vulnerabilities
• hashing passwords with bcrypt/argon2
• sanitizing SQL queries with parameterized statements
• configuring CORS/CSP headers
• validating input with Zod
• setting up JWT tokens

When not to use

• pre-built OAuth/SSO integrations
• standalone security audits

Skill page

Source