Skill: Security Advanced

Loaded on-demand when task involves auth, input validation, secrets, vulnerabilities, CORS, CSP, or security review

Auto-Detect

Trigger this skill when:

• Files: auth.ts, middleware.ts, *.guard.ts, cors.ts, helmet.*
• package.json contains: bcrypt, jsonwebtoken, passport, helmet, cors, express-rate-limit
• Code patterns: jwt.sign, jwt.verify, hash, encrypt, sanitize, csrf
• Task mentions: security audit, penetration test, vulnerability, hardening, OWASP

Decision Tree: Authentication Strategy