Security Best Practices
This is a routing skill that figures out which security layer is actually missing before you start hardening. It classifies your problem into one of six modes: browser policy, session and CSRF, abuse controls, validation and unsafe execution, secrets and config, or verification review. The goal is to turn vague "make this secure" requests into one concrete brief with a verification plan, not dump an OWASP checklist. It routes auth stack decisions to authentication-setup, schema work to database-schema-design, and code-level bugs to debugging. Best for web apps, APIs, and backend services where you need a vendor-neutral hardening workflow instead of a giant middleware parade.
- skills.sh installs
- 169
- GitHub stars
- 22
- last updated
- Jun 3, 2026
Install
$ npx -y skills add akillness/oh-my-skills --skill security-best-practices --agent claude-codeInstalls into .claude/skills of the current project.
Files
Security Best Practices
Use this skill when the job is to name one missing security layer and turn it into a bounded hardening brief.
The job is not to dump a giant OWASP list, middleware catalog, or scanner parade. The job is to:
- frame the surface and risk,
- choose one primary hardening mode,
- recommend the smallest credible first slice,
- name the verification ladder,
- route adjacent work honestly.
Read these support docs first:
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/akillness/oh-my-skills
- Category
- Security
- First seen
- Jun 3, 2026
More from akillness/oh-my-skills
All 81- Authentication Setup168
- Fabric168
- Firebase Ai Logic168
- Debugging167
- Environment Setup167
- Git Submodule167
- Git Workflow167
- Marketing Skills Collection167
- Pattern Detection167
- Bmad166
- System Environment Setup166
- Workflow Automation166
- Clawteam165
- State Management165
- Firebase Cli164
- Langsmith164
- Npm Git Install164
- Prompt Repetition164
- Skill Standardization164
- Vercel Deploy164
- Genkit163
- Jeo163
- React Grab163
- Skill Autoresearch160
Recommended
More Security
security-operations-deploymentharperaa/secure-claude-skillsOperational security guidance for deployment, monitoring, and maintenance. Use this skill when you need to understand which middlewares to apply, configure envi165skills.sh installs
