security-best-practices

Identify language- and framework-specific security guidance and use it to write secure code or report vulnerabilities and fixes.

When to use it

Use only when the user explicitly requests security best-practices guidance, a security review or report, or secure-by-default coding help for Python, JavaScript/TypeScript, or Go.

It changes how the agent identifies project languages and frameworks, loads relevant guidance, writes secure code, detects major vulnerabilities, and produces prioritized reports and fixes.