# Secure Coding

> <!-- Copyright (c) 2026 defconxt. All rights reserved. -->

- Skill: `majiayu000/secure-coding-2` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds add majiayu000/secure-coding-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/majiayu000/secure-coding-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: majiayu000 (https://skillmd.com/u/majiayu000)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/majiayu000/secure-coding-2

---


<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- CIPHER is a trademark of defconxt. -->
---
name: secure-coding
description: >-
  Secure coding practices for preventing vulnerabilities at the source code level across languages and frameworks.
domain: cybersecurity
subdomain: secure-coding
tags:
  - secure-coding
  - security
version: "1.0"
author: defconxt
license: AGPL-3.0
---

# secure coding

## Overview

Secure coding practices for preventing vulnerabilities at the source code level across languages and frameworks.

## When to Use

Activate this domain when tasks involve secure coding techniques, methodologies, or tools.

## Quick Reference

```bash
# List available techniques
ls skills/secure-coding/techniques/

# Run a specific technique agent
python3 skills/secure-coding/techniques/*/scripts/agent.js --help
```

## Capabilities

| Capability | Description |
|------------|-------------|
| Technique Assessment | Evaluate secure coding posture |
| Tool Integration | Leverage specialized secure coding tooling |
| Reporting | Generate structured findings |
| Automation | Script common secure coding workflows |

## Workflow

1. **Scope** — Define secure coding assessment boundaries
2. **Discover** — Identify targets and attack surface
3. **Assess** — Apply relevant techniques
4. **Document** — Record findings with evidence
5. **Report** — Generate actionable recommendations

## Techniques

See individual technique directories under `techniques/` for detailed implementations.

## References

- OWASP Testing Guide
- NIST SP 800-115 Technical Guide to Information Security Testing
- MITRE ATT&CK Framework