Agent skill · security · aiskillstore
security-checklist
Use this skill when implementing security measures or conducting security audits. Provides OWASP Top 10 mitigations, authentication patterns, input validation strategies, and compliance guidelines. Ensures applications are secure against common vulnerabilities.
Why this skill is useful
Provides specific OWASP Top 10 mitigations and security patterns that the AI wouldn't reliably generate on its own.
What it needs
Requires bandit, node, pip, python, semgrep, trufflehog installed locally. About 10k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Checklist Overview This skill provides comprehensive security guidance for building secure applications. Whether performing a security audit, implementing new features, or hardening existing systems, this framework helps identify and mitigate common vulnerabilities. When to use this skill: Conducting security audits or reviews Implementing authentication and authorization Validating and sanitizing user input Handling sensitive data (PII, credentials, payment info) Ensuring compliance (GDPR, HIPAA, SOC2) Preparing for security assessments or penetration tests Reviewing third-party dependencies for vulnerabilities Required Tools This skill requires the following tools to be installed on your system: For JavaScript/TypeScript Projects Node.js 18+ with npm Command: npm audit Install: Node.js comes with npm pre-installed For Python Projects Python 3.8+ with pip pip-audit: Security scanner for Python dependencies Install: pip install pip-audit Command: pip-audit Optional (Advanced Security Scanning) Semgrep: Static analysis tool Install (macOS): brew install semgrep Install (pip): pip install semgrep Command: semgrep --config=auto . Bandit: Python security linter Install: pip install bandit Command: bandit -r . TruffleHog: Secrets detection Install (macOS): brew install trufflesecurity/trufflehog/trufflehog Install (Go): go install github.com/trufflesecurity/trufflehog/v3@latest Command: trufflehog filesystem . Installation Verification Note: The skill will automatically detect which tools are available and use appropriate commands for your project type. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security-checklist