Agent skill · security · aiskillstore
pitfalls-security
Security patterns for session keys, caching, logging, and environment variables. Use when implementing authentication, caching sensitive data, or setting up logging. Triggers on: session key, private key, cache, logging, secrets, environment variable.
Why this skill is useful
Provides specific security patterns and code examples for managing session keys, caching sensitive data, and logging practices that the AI wouldn't reliably generate on its own.
What it needs
About 2k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Pitfalls Common pitfalls and correct patterns for security. When to Use Implementing session key management Caching data (especially sensitive) Setting up structured logging Handling environment variables Reviewing security-sensitive code Workflow Step 1: Check Key Storage Verify no private keys stored in plaintext. Step 2: Verify Cache Safety Ensure sensitive data not cached inappropriately. Step 3: Check Logging Confirm no secrets in logs. --- Session Key Security Environment Variables Caching Strategies Structured Logging Audit Logging Quick Checklist [ ] No private keys in localStorage [ ] Session keys have expiry and limits [ ] AES-256-GCM for stored credentials [ ] Audit logging for sensitive operations [ ] No secrets in console.log [ ] Sensitive data not cached inappropriately [ ] VITE prefix for frontend env vars
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/pitfalls-security