<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
---
name: secure-coding
description: >-
  Secure coding practices for preventing vulnerabilities at the source code level across languages and frameworks.
domain: cybersecurity
subdomain: secure-coding
tags:
  - secure-coding
  - security
version: "1.0"
author: defconxt
license: AGPL-3.0
---

# secure coding

## Overview

Secure coding practices for preventing vulnerabilities at the source code level across languages and frameworks.

## When to Use

Activate this domain when tasks involve secure coding techniques, methodologies, or tools.

## Quick Reference

```bash
# List available techniques
ls skills/secure-coding/techniques/

# Run a specific technique agent
python3 skills/secure-coding/techniques/*/scripts/agent.js --help
```

## Capabilities

| Capability | Description |
|------------|-------------|
| Technique Assessment | Evaluate secure coding posture |
| Tool Integration | Leverage specialized secure coding tooling |
| Reporting | Generate structured findings |
| Automation | Script common secure coding workflows |

## Workflow

1. **Scope** — Define secure coding assessment boundaries
2. **Discover** — Identify targets and attack surface
3. **Assess** — Apply relevant techniques
4. **Document** — Record findings with evidence
5. **Report** — Generate actionable recommendations

## Techniques

See individual technique directories under `techniques/` for detailed implementations.

## References

- OWASP Testing Guide
- NIST SP 800-115 Technical Guide to Information Security Testing
- MITRE ATT&CK Framework
