security-logging - Implement security validation and structured logging
Defines security input validation, API request checks, secret detection, and structured event logging for auditing and incident response.
Tags
Updated: 2026-09-29Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Validate boundary inputs
- Detect SQL injection patterns
- Detect XSS patterns
- Sanitize user input
- Validate filenames
- Check API rate limits
- Limit request sizes
- Log security events
- Hash event data
- Log authentication events
- Log authorization events
- Log privilege escalation
- Scan hardcoded secrets
- Replace secrets with environment variables
Inputs
- Application logs
- Inbound API requests
- Configuration surfaces
- Source files
- Scan directories
- Service name
- Security event metadata
- Authentication context
- Authorization context
Outputs
- Validation errors
- HTTP error responses
- Structured security logs
- Secret scan results
- Modified source files
- Backup files
Requirements
- Python runtime
- bleach package
- Pydantic package
- Flask package
- Bash shell
- ripgrep utility
- grep utility
- sed and cp utilities
- Log directory write access