Traction scoreGitHub stars can be faked, so popularity alone can be misleading. Traction Score looks for broader signs of recent attention, adoption, and active maintenance.
This skill guides Claude through writing secure web applications by covering the vulnerabilities that matter most: XSS, CSRF, IDOR, SSRF, SQL injection, file upload attacks, XXE, path traversal, and more. Each section provides implementation patterns, bypass techniques, and verification checklists. It helps web developers code with fewer exploitable paths and gives security engineers a structured reference for code reviews and audits.
WHO IT'S FOR
Web Application Developers
write secure code and prevent common vulnerabilities
Security Engineers / AppSec Reviewers
enforce secure coding practices
API Developers
prevent API security vulnerabilities
DevOps / Platform Engineers
configure security headers, CSP policies, and deployment safeguards
Compatible AgentsThe repository documents support for these agents. The skills may also work with other agents that can load SKILL.md files, but they may need some setup or small changes.
Manually add the cloned repository to `~/.claude/skills` for a global installation, or to `.claude/skills` within your project directory for a project-only installation.
Manually add the cloned repository to `~/.cursor/skills` for a global installation, or to `.cursor/skills` within your project directory for a project-only installation.
Manually add the cloned repository to `~/.agents/skills` for a global installation, or to `.agents/skills` within your project directory for a project-only installation.
Manually add the cloned repository to `~/.copilot/skills` for a global installation, or to `.github/skills` within your project directory for a project-only installation.
Manually add the cloned repository to `~/.gemini/antigravity/skills/` for a global installation, or to `.agent/skills/` within your project directory for a project-only installation.
Start a web application with secure coding practices
Uses VibeSec-Skill
Replace `[web app description]` with a concise description of the web application, including its framework and any authentication or sensitive-data requirements.
Provide the relevant project code or working context to review or modify.
Use VibeSec-Skill for this task. I'm building a [web app description]. Please follow secure coding practices.