Skill · em Proteger
security-best-practices
Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python,…
Procedência
- Origem: davila7/claude-code-templates
- Caminho:
cli-tool/components/skills/security/security-best-practices - Versão fixada:
57f899e5394bb8ca166f38eacae8f0853cbfe033 - Licença: Apache-2.0
- Espelhado em 25/09/2026
- 21 downloads no Claude Code Templates (lido em 25/09/2026)
Antes de instalar
13 arquivos · 402,1 KB · só texto, nenhum script
Instalar na sua CLI
O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.
Claude Code
Neste projeto: instala em .claude/skills/security-best-practices/.
d=".claude/skills/security-best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/security-best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md" \ -o "$d/agents/openai.yaml" "$u/agents/openai.yaml" \ -o "$d/LICENSE.txt" "$u/LICENSE.txt" \ -o "$d/references/golang-general-backend-security.md" "$u/references/golang-general-backend-security.md" \ -o "$d/references/javascript-express-web-server-security.md" "$u/references/javascript-express-web-server-security.md" \ -o "$d/references/javascript-general-web-frontend-security.md" "$u/references/javascript-general-web-frontend-security.md" \ -o "$d/references/javascript-jquery-web-frontend-security.md" "$u/references/javascript-jquery-web-frontend-security.md" \ -o "$d/references/javascript-typescript-nextjs-web-server-security.md" "$u/references/javascript-typescript-nextjs-web-server-security.md" \ -o "$d/references/javascript-typescript-react-web-frontend-security.md" "$u/references/javascript-typescript-react-web-frontend-security.md" \ -o "$d/references/javascript-typescript-vue-web-frontend-security.md" "$u/references/javascript-typescript-vue-web-frontend-security.md" \ -o "$d/references/python-django-web-server-security.md" "$u/references/python-django-web-server-security.md" \ -o "$d/references/python-fastapi-web-server-security.md" "$u/references/python-fastapi-web-server-security.md" \ -o "$d/references/python-flask-web-server-security.md" "$u/references/python-flask-web-server-security.md"
Global: instala em ~/.claude/skills/security-best-practices/.
d="$HOME/.claude/skills/security-best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/security-best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md" \ -o "$d/agents/openai.yaml" "$u/agents/openai.yaml" \ -o "$d/LICENSE.txt" "$u/LICENSE.txt" \ -o "$d/references/golang-general-backend-security.md" "$u/references/golang-general-backend-security.md" \ -o "$d/references/javascript-express-web-server-security.md" "$u/references/javascript-express-web-server-security.md" \ -o "$d/references/javascript-general-web-frontend-security.md" "$u/references/javascript-general-web-frontend-security.md" \ -o "$d/references/javascript-jquery-web-frontend-security.md" "$u/references/javascript-jquery-web-frontend-security.md" \ -o "$d/references/javascript-typescript-nextjs-web-server-security.md" "$u/references/javascript-typescript-nextjs-web-server-security.md" \ -o "$d/references/javascript-typescript-react-web-frontend-security.md" "$u/references/javascript-typescript-react-web-frontend-security.md" \ -o "$d/references/javascript-typescript-vue-web-frontend-security.md" "$u/references/javascript-typescript-vue-web-frontend-security.md" \ -o "$d/references/python-django-web-server-security.md" "$u/references/python-django-web-server-security.md" \ -o "$d/references/python-fastapi-web-server-security.md" "$u/references/python-fastapi-web-server-security.md" \ -o "$d/references/python-flask-web-server-security.md" "$u/references/python-flask-web-server-security.md"
Codex
Neste projeto: instala em .agents/skills/security-best-practices/.
d=".agents/skills/security-best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/security-best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md" \ -o "$d/agents/openai.yaml" "$u/agents/openai.yaml" \ -o "$d/LICENSE.txt" "$u/LICENSE.txt" \ -o "$d/references/golang-general-backend-security.md" "$u/references/golang-general-backend-security.md" \ -o "$d/references/javascript-express-web-server-security.md" "$u/references/javascript-express-web-server-security.md" \ -o "$d/references/javascript-general-web-frontend-security.md" "$u/references/javascript-general-web-frontend-security.md" \ -o "$d/references/javascript-jquery-web-frontend-security.md" "$u/references/javascript-jquery-web-frontend-security.md" \ -o "$d/references/javascript-typescript-nextjs-web-server-security.md" "$u/references/javascript-typescript-nextjs-web-server-security.md" \ -o "$d/references/javascript-typescript-react-web-frontend-security.md" "$u/references/javascript-typescript-react-web-frontend-security.md" \ -o "$d/references/javascript-typescript-vue-web-frontend-security.md" "$u/references/javascript-typescript-vue-web-frontend-security.md" \ -o "$d/references/python-django-web-server-security.md" "$u/references/python-django-web-server-security.md" \ -o "$d/references/python-fastapi-web-server-security.md" "$u/references/python-fastapi-web-server-security.md" \ -o "$d/references/python-flask-web-server-security.md" "$u/references/python-flask-web-server-security.md"
Global: instala em ~/.agents/skills/security-best-practices/.
d="$HOME/.agents/skills/security-best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/security-best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md" \ -o "$d/agents/openai.yaml" "$u/agents/openai.yaml" \ -o "$d/LICENSE.txt" "$u/LICENSE.txt" \ -o "$d/references/golang-general-backend-security.md" "$u/references/golang-general-backend-security.md" \ -o "$d/references/javascript-express-web-server-security.md" "$u/references/javascript-express-web-server-security.md" \ -o "$d/references/javascript-general-web-frontend-security.md" "$u/references/javascript-general-web-frontend-security.md" \ -o "$d/references/javascript-jquery-web-frontend-security.md" "$u/references/javascript-jquery-web-frontend-security.md" \ -o "$d/references/javascript-typescript-nextjs-web-server-security.md" "$u/references/javascript-typescript-nextjs-web-server-security.md" \ -o "$d/references/javascript-typescript-react-web-frontend-security.md" "$u/references/javascript-typescript-react-web-frontend-security.md" \ -o "$d/references/javascript-typescript-vue-web-frontend-security.md" "$u/references/javascript-typescript-vue-web-frontend-security.md" \ -o "$d/references/python-django-web-server-security.md" "$u/references/python-django-web-server-security.md" \ -o "$d/references/python-fastapi-web-server-security.md" "$u/references/python-fastapi-web-server-security.md" \ -o "$d/references/python-flask-web-server-security.md" "$u/references/python-flask-web-server-security.md"
Antigravity
Neste projeto: instala em .agents/skills/security-best-practices/.
d=".agents/skills/security-best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/security-best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md" \ -o "$d/agents/openai.yaml" "$u/agents/openai.yaml" \ -o "$d/LICENSE.txt" "$u/LICENSE.txt" \ -o "$d/references/golang-general-backend-security.md" "$u/references/golang-general-backend-security.md" \ -o "$d/references/javascript-express-web-server-security.md" "$u/references/javascript-express-web-server-security.md" \ -o "$d/references/javascript-general-web-frontend-security.md" "$u/references/javascript-general-web-frontend-security.md" \ -o "$d/references/javascript-jquery-web-frontend-security.md" "$u/references/javascript-jquery-web-frontend-security.md" \ -o "$d/references/javascript-typescript-nextjs-web-server-security.md" "$u/references/javascript-typescript-nextjs-web-server-security.md" \ -o "$d/references/javascript-typescript-react-web-frontend-security.md" "$u/references/javascript-typescript-react-web-frontend-security.md" \ -o "$d/references/javascript-typescript-vue-web-frontend-security.md" "$u/references/javascript-typescript-vue-web-frontend-security.md" \ -o "$d/references/python-django-web-server-security.md" "$u/references/python-django-web-server-security.md" \ -o "$d/references/python-fastapi-web-server-security.md" "$u/references/python-fastapi-web-server-security.md" \ -o "$d/references/python-flask-web-server-security.md" "$u/references/python-flask-web-server-security.md"
Global: instala em ~/.gemini/antigravity-cli/skills/security-best-practices/.
d="$HOME/.gemini/antigravity-cli/skills/security-best-practices" u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/security/security-best-practices" curl -fsSL --create-dirs \ -o "$d/SKILL.md" "$u/SKILL.md" \ -o "$d/agents/openai.yaml" "$u/agents/openai.yaml" \ -o "$d/LICENSE.txt" "$u/LICENSE.txt" \ -o "$d/references/golang-general-backend-security.md" "$u/references/golang-general-backend-security.md" \ -o "$d/references/javascript-express-web-server-security.md" "$u/references/javascript-express-web-server-security.md" \ -o "$d/references/javascript-general-web-frontend-security.md" "$u/references/javascript-general-web-frontend-security.md" \ -o "$d/references/javascript-jquery-web-frontend-security.md" "$u/references/javascript-jquery-web-frontend-security.md" \ -o "$d/references/javascript-typescript-nextjs-web-server-security.md" "$u/references/javascript-typescript-nextjs-web-server-security.md" \ -o "$d/references/javascript-typescript-react-web-frontend-security.md" "$u/references/javascript-typescript-react-web-frontend-security.md" \ -o "$d/references/javascript-typescript-vue-web-frontend-security.md" "$u/references/javascript-typescript-vue-web-frontend-security.md" \ -o "$d/references/python-django-web-server-security.md" "$u/references/python-django-web-server-security.md" \ -o "$d/references/python-fastapi-web-server-security.md" "$u/references/python-fastapi-web-server-security.md" \ -o "$d/references/python-flask-web-server-security.md" "$u/references/python-flask-web-server-security.md"
Peça ao Rook
Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cct.security-best-practices
Prévia do SKILL.md
---
name: "security-best-practices"
description: "Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript,…
author: openai
---
# Security Best Practices
## Overview
This skill provides a description of how to identify the language and frameworks used by the current context, and then to load information from this skill's references directory about the security best practices for this language and or frameworks.
This information, if present, can be used to write new secure by default code, or to passively detect major issues within existing code, or (if requested by the user) provide a vulnerability report and suggest fixes.
## Workflow
The initial step for this skill is to identify ALL languages and ALL frameworks which you are being asked to use or already exist in the scope of the project you are working in. Focus on the primary core frameworks. Often you will want to identify both frontend and backend languages and frameworks.
Then check this skill's references directory to see if there are any relevant documentation for the language and or frameworks. Make sure you read ALL reference files which relate to the specific framework or language. The format of the filenames is `<language>-<framework>-<stack>-security.md`. You should also check if…
If working on a web application which includes a frontend and a backend, make sure you have checked for reference documents for BOTH the frontend and backend!
If you are asked to make a web app which will include both a frontend and backend, but the frontend framework is not specified, also check out `javascript-general-web-frontend-security.md`. It is important that you understand how to secure both the frontend and backend.
If no relevant information is available in the skill's references directory, think a little bit about what you know about the language, the framework, and all well known security best practices for it. If you are unsure you can try to search online for documentation on security best practices.
From there it can operate in a few ways.
1. The primary mode is to just use the information to write secure by default code from this point forward. This is useful for starting a new project or when writing new code.
…