Security Best Practices

This is a routing skill that figures out which security layer is actually missing before you start hardening. It classifies your problem into one of six modes: browser policy, session and CSRF, abuse controls, validation and unsafe execution, secrets and config, or verification review. The goal is to turn vague "make this secure" requests into one concrete brief with a verification plan, not dump an OWASP checklist. It routes auth stack decisions to authentication-setup, schema work to database-schema-design, and code-level bugs to debugging. Best for web apps, APIs, and backend services where you need a vendor-neutral hardening workflow instead of a giant middleware parade.

Install to Claude Code

npx -y skills add akillness/oh-my-skills --skill security-best-practices --agent claude-code