security-fundamentals

Features and purpose

TRIGGERS: "is this secure?", "security review", "check for vulnerabilities", "auth check", "building auth", "implementing login", "storing passwords", "API keys", "user input", "adding authentication", "user credentials", "session handling", "token storage", authentication, authorization, input validation, SQL injection, XSS, OWASP, passwords, tokens, JWT. USE WHEN: Junior is BUILDING auth flows, handling user input, storing sensitive data, or working with APIs. PROVIDES: OWASP Top 10 checks, input validation patterns, auth best practices, security anti-patterns. PROACTIVE: Triggers when junior mentions building security-related features, not just reviewing.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.