Security Best Practices

Use this skill only when the user explicitly requests security best practices or a security review.

Workflow

1. Identify primary languages and frameworks in scope.
2. Load matching guidance from references/.
3. Apply secure-by-default patterns for new code.
4. If asked, produce a prioritized security report.
5. Offer fixes one finding at a time with minimal regression risk.

Identify Stack

• Inspect the repo for language and framework evidence.
• Focus on core backend and frontend stacks only.
• If the stack is unclear, ask a single clarifying question.