Secure Code Guardian skill: what it does and how to install it

What it does. Threat-models an application's attack surface, plans layered controls, implements secure code and validates protections with focused checks. It covers password hashing, parameterised queries, input validation, JWTs, rate limiting, security headers, logging and secret management, then records configuration and testing requirements.

When to use it. For implementing authentication, authorisation, input handling, encryption, session security or OWASP Top 10 protections. Pre-built OAuth or SSO integrations and standalone security audits are better handled by specialised skills.