williamzujkowski/standards
Overview
This skill codifies NIST-aligned software development standards for compliance-focused projects. It provides a concise checklist, implementation patterns, and resources to start projects with secure, maintainable defaults. Use it to accelerate compliant architectures and enforce repeatable best practices across teams.
How this skill works
The skill inspects project practices and provides guidance across three levels: Quick Start, Implementation, and Mastery. It highlights core principles, recommended patterns (error handling, monitoring, validation), and common pitfalls to avoid. Templates and reference links support rapid adoption and consistent implementations.
When to use it
- Starting a new project that must meet compliance or security standards
- Auditing an existing codebase for compliance gaps
- Designing architecture and implementation patterns for regulated environments
- Onboarding teams to a standard set of secure defaults and test practices
- Creating templates and CI checks for production deployments
Best practices
- Adopt secure defaults and validate all external inputs
- Implement comprehensive error handling and observable logging
- Write unit and integration tests with good coverage before release
- Document public interfaces and maintain design rationale
- Choose architecture patterns based on threat model and operational needs
- Add monitoring hooks and performance checks for production
Example use cases
- Quick project bootstrap with NIST-aligned checklist and templates
- Reviewing code for missing validations, logging, or tests
- Defining CI pipelines that enforce testing and security gates
- Creating team onboarding material with core compliance concepts
- Selecting and documenting error-recovery and monitoring patterns for services
FAQ
It covers core NIST-aligned principles for secure software development, implementation patterns (error handling, monitoring, validation), testing strategies, and templates for quick project starts.
How do I use the templates?
Use templates as starter configurations for projects: copy the starter files, adapt settings to your environment, and integrate them into your CI to enforce the standards.
27 skills
This skill helps you implement NIST compliance in software projects by applying secure, maintainable, and testable patterns across architecture, testing, and
This skill helps you implement secure, maintainable NoSQL database practices with clear patterns, testing, and observability across projects.
This skill helps you build production-ready React Native mobile apps for iOS and Android by applying organization, navigation, performance, and testing best
This skill helps you validate Python projects by enforcing standards, tests, and documentation practices across levels of mastery.
This skill helps you implement robust API security by guiding authentication, authorization, rate limiting, and input validation across services.
This skill helps you implement robust architecture patterns in Python projects by enforcing security, testing, logging, and performance best practices.
This skill helps you design and execute real integration tests with containers, API contracts, and real databases for reliable software delivery.
This skill helps you implement robust CI/CD pipelines with automated testing, security scanning, artifact management, and deployment strategies for reliable
This skill helps you master Vue 3 Composition API versus Options API to build scalable, maintainable frontends faster.
This skill helps you implement infrastructure-as-code with Terraform, enabling repeatable, secure deployments and scalable resource management across
This skill helps you implement GDPR best practices in compliance environments, emphasizing secure defaults, thorough testing, and maintainable, observable data
This skill helps you implement idiomatic Go coding standards with explicit error handling, concurrency patterns, and thorough testing for production-ready code.
This skill helps you design and operate Kubernetes operators and CRDs enabling automated lifecycle management of custom resources.
This skill helps you establish observability metrics standards across projects, enabling secure, tested, and maintainable instrumentation and performance
This skill helps you achieve HIPAA compliance by guiding encryption, access control, auditing, and risk assessment across healthtech applications.
This skill helps you implement modern security practices across zero trust, supply chain, and devsecops, reducing risk and accelerating secure development.
This skill helps you establish robust model development practices in ML AI environments, ensuring secure, well-documented, testable code and optimized
This skill helps you design and operate end-to-end MLOps pipelines, tracking experiments, versioning models, and deploying production ML systems with reliable
This skill helps you implement robust data quality checks using automated validation, scoring, and monitoring to improve data reliability.
This skill helps you implement robust authorization with RBAC and ABAC in Python, aligning with NIST controls for production security.
This skill helps you enforce Kotlin coding standards for null safety, coroutines, and idiomatic patterns across JVM and Android projects.
This skill helps you start secure container environments quickly by applying immutable infrastructure, minimal images, non-root execution, and vulnerability
This skill helps you implement authentication security best practices across OAuth2, JWT, MFA, and session management for production systems.
This skill guides secure, maintainable model deployment in ML environments, applying performance, testing, and observability patterns from production-grade
This skill helps you implement SOC incident response and threat hunting practices aligned with NIST 800-61 to improve detection, containment, and recovery.
This skill helps you design and implement AWS advanced patterns for orchestration, events, and observability to build scalable serverless architectures.
This skill helps you implement missing Level 1 sections by guiding Python projects from setup to foundational design, ensuring consistency with production
