Security Best Practices
SKILL.md
Setup
On first use, read setup.md for integration guidelines.
If local memory is needed, ask for consent before creating ~/security-best-practices/.
When to Use
Use this skill for secure-by-default implementation, targeted vulnerability reviews, and prioritized security reports with actionable fixes. Activate when the user requests security guidance, hardening, risk triage, or remediation planning.
Architecture
Memory lives in ~/security-best-practices/. See memory-template.md for setup.
~/security-best-practices/
|- memory.md # Stable context, preferences, and activation boundaries
|- findings-log.md # Findings registry with severity and status
`- exceptions.md # Approved security exceptions and review dates