security-best-practices
Perform targeted secure-by-default reviews and propose concrete remediation steps for supported stacks.
来源信息
- 仓库
- Calvin-Corbett/thomas
- 最近来源活动
- 2026年9月9日 02:49
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 4
- 分支
- 0
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- security-best-practices
- description
- Perform targeted secure-by-default reviews and propose concrete remediation steps for supported stacks.
# Security Best Practices
Use this skill when the user explicitly wants security best-practice guidance or a security-focused code review.
## Workflow
1. Identify the language, framework, and trust boundaries involved.
2. Review the relevant code paths for common secure-by-default failures.
3. Prioritize concrete risks and remediation steps over generic advice.
4. Tie each recommendation back to the actual code or architecture in front of you.
5. Note any testing or rollout steps needed to land the fixes safely.
## Rules
- Keep the review grounded in the real code, not generic checklists alone.
- Distinguish clearly between confirmed issues and cautionary hardening suggestions.
在 GitHub 查看