Agent skill · security · aiskillstore
security-patterns
Security patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input validation, secure coding.
Why this skill is useful
Provides specific security patterns and OWASP guidelines that the AI wouldn't reliably generate on its own.
What it needs
About 3k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security Patterns Essential security patterns for web applications. OWASP Top 10 Quick Reference Rank Vulnerability Prevention ------ -------------- ------------ A01 Broken Access Control Check permissions server-side, deny by default A02 Cryptographic Failures Use TLS, hash passwords, encrypt sensitive data A03 Injection Parameterized queries, validate input A04 Insecure Design Threat modeling, secure defaults A05 Security Misconfiguration Harden configs, disable unused features A06 Vulnerable Components Update dependencies, audit regularly A07 Auth Failures MFA, rate limiting, secure session management A08 Data Integrity Failures Verify signatures, use trusted sources A09 Logging Failures Log security events, protect logs A10 SSRF Validate URLs, allowlist destinations Input Validation Validation Rules Output Encoding Encoding by Context Context Encoding --------- ---------- HTML body HTML entity encode HTML attribute Attribute encode + quote JavaScript JS encode URL parameter URL encode CSS CSS encode Authentication Auth Checklist [ ] Hash passwords with bcrypt/argon2 (cost factor 12+) [ ] Implement rate limiting on login [ ] Use secure session tokens (random, long) [ ] Set secure cookie flags (HttpOnly, Secure, SameSite) [ ] Implement account lockout after failed attempts [ ] Support MFA for sensitive operations Authorization Secrets Management Secret Handling Rules Security Headers Quick Security Audit Additional Resources ./references/owasp-detailed.md - Full OWASP Top 10 details ./references/auth-patterns.md - JWT, OAuth, session management ./references/crypto-patterns.md - Encryption, hashing, signatures ./references/secure-headers.md - HTTP security headers guide Scripts ./scripts/security-scan.sh - Quick security grep patterns ./scripts/dependency-audit.sh - Check for vulnerable dependencies
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security-patterns