security-best-practices

Perform language- and framework-specific security best-practice reviews and suggest improvements. Use when the user explicitly requests security best-practices guidance, a security review or report, or secure-by-default coding help. Supports Python, JavaScript/TypeScript, and Go. Do NOT use for general code review, debugging, threat modeling (use security-threat-model), or non-security tasks.