security-practices
Security practices including secrets management, input validation, SSRF prevention, and production hardening. Use for security-sensitive code.
Installation
Details
Usage
After installing, this skill will be available to your AI coding assistant.
Verify installation:
skills listSkill Instructions
name: security-practices description: Security practices including secrets management, input validation, SSRF prevention, and production hardening. Use for security-sensitive code.
security-practices
Quick Start
- All secrets in environment variables (never in config files)
- Validate inputs at system boundaries
- Sanitize error responses (no stack traces in production)
- Use HTTPS for all external connections
Key Principles
- Environment variables for all secrets
- SSRF prevention (block internal IP ranges)
- Development vs Production mode separation
- Rigorous input validation
References
See rules.md for complete conventions.
More by eser
View allCode design patterns: pure functions, immutability, composition, and async. Use when designing code or functions.
Go conventions for hexagonal architecture, project structure, error handling, testing, and observability. Use when writing Go services.
Workflow rules for task execution, respecting user code, and git commits. Use when planning or executing development tasks.
System architecture: modules, project structure, ADRs, and testing. Use when designing or reviewing systems.