security-best-practices

Topics in the source

• Security Best Practices
• Overview
• Workflow
• Workflow Decision Tree
• Overrides
• Report Format
• Fixes
• General Security Advice

This skill provides a description of how to identify the language and frameworks used by the current context, and then to load information from this skill's references directory about the security best practices for this language and or frameworks. This information, if present, can be used to write new secure by default code, or to passively detect major issues within existing code, or (if requested by the user) provide a vulnerability report and suggest fixes. The initial step for this skill is to identify ALL languages and ALL frameworks which you are being asked to use or already exist in the scope of the project you are working in. Focus on the primary core frameworks. Often you will want to identify both frontend and backend languages and frameworks. Then check this skill's references directory to see if there are any relevant documentation for the language and or frameworks. Make sure you read ALL reference files which relate to the specific framework or language. The format of the filenames is - - -security.md. You should also check if there is a -general- -security.md which is agnostic to the framework you may be using. If working on a web application which includes a front

This is an excerpt. Refer to the complete source and its current requirements.