security-best-practices

# Security Best Practices Use this skill when the user explicitly wants security best-practice guidance or a security-focused code review. ## Workflow 1. Identify the language, framework, and trust boundaries involved. 2. Review the relevant code paths for common secure-by-default failures. 3. Prioritize concrete risks and remediation steps over generic advice. 4. Tie each recommendation back to the actual code or architecture in front of you. 5. Note any testing or rollout steps needed to land the fixes safely. ## Rules - Keep the review grounded in the real code, not generic checklists alone. - Distinguish clearly between confirmed issues and cautionary hardening suggestions.