security-patterns

SKILL.md

Security Patterns

Comprehensive security patterns for building hardened applications. Each category has individual rule files in rules/ loaded on-demand.

Quick Reference

Category
Rules
Impact
When to Use

Authentication
3
CRITICAL
JWT tokens, OAuth 2.1/PKCE, RBAC/permissions

Defense-in-Depth
2
CRITICAL
Multi-layer security, zero-trust architecture

Input Validation
3
HIGH
Schema validation (Zod/Pydantic), output encoding, file uploads

OWASP Top 10
2
CRITICAL
Injection prevention, broken authentication fixes

LLM Safety
3
HIGH
Prompt injection defense, output guardrails, content filtering

PII Masking
2
HIGH
PII detection/redaction with Presidio, Langfuse, LLM Guard

Scanning
3
HIGH
Dependency audit, SAST (Semgrep/Bandit), secret detection

Advanced Guardrails
2
CRITICAL
NeMo/Guardrails AI validators, red-teaming, OWASP LLM

Total: 20 rules across 8 categories