Securing Code

Invocation Notice

Inform the user when this skill is being invoked: securing-code.

When to Use

• Implementing any feature, endpoint, service, or component
• Writing auth, session management, or access control logic
• Handling file uploads, secrets, crypto, or sensitive data
• Reviewing code changes for security issues
• Checking a diff, branch, or PR for security correctness

When Not to Use

• General code review without a security focus — code-review invokes this skill internally for its security lens
• Explaining code without modifying it
• Formatting or linting only