secure-code-guardian

The secure-code-guardian skill is designed to help developers implement secure software practices when building authentication systems, authorization logic, and input-handling mechanisms. It focuses on preventing common security issues aligned with the OWASP Top 10, such as injection attacks, cross-site scripting (XSS), and insecure authentication flows. The skill provides structured guidance for building systems that reduce vulnerabilities by enforcing secure-by-default implementation patterns rather than relying on post-hoc fixes.

This skill emphasizes a defense-in-depth approach, covering multiple layers of application security. Key capabilities include secure password handling using strong hashing algorithms like bcrypt or Argon2, enforcing parameterized queries to prevent SQL injection, validating and sanitizing user input, configuring security headers such as CSP and HSTS, and implementing JWT-based session management. It also includes validation checkpoints to verify authentication robustness (such as rate limiting and token expiration), authorization boundaries (preventing privilege escalation), and input safety against malicious payloads.

It is intended for developers and engineering teams building production systems that require robust security controls. Typical users include backend and full-stack engineers implementing login systems, API authentication, and role-based access control, as well as teams hardening existing applications against vulnerabilities. The skill is particularly useful during implementation phases where secure coding practices must be applied consistently, but it explicitly defers specialized needs like full security audits or pre-built OAuth/SSO integrations to more focused tools.