security-and-hardening
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known…
- installs 8w
- 22,773
- 30-day movement
- starts with the next reading
- Related entries
- 6
- Connections
- 0
This is a SKILL.md agent skill covering security hardening practices for web applications, organized into an overview, when-to-use guidance, resources, pitfalls, and a checklist. Its structure includes OWASP Top 10 prevention patterns, input validation, dependency audit triage, supply-chain hygiene, rate limiting, and secrets management.
Use it when your agent needs structured, pattern-based guidance for handling untrusted input, authentication, sensitive data, or dependency risk.
Use it to
- Audit an input handler for vulnerabilities
- Check a login flow against the OWASP Top Ten
- Triage package-manager audit findings
- Design safe file upload and destructive-path handling
- Assess GDPR/CCPA privacy considerations in a feature
For Developers and agents building or auditing web features handling untrusted data
- Host repository
- addyosmani/agent-skills
- Installs, lifetime
- 37k
- Installs, 8 weeks
- 23k
- Host stars
- 94k
- Host language
- JavaScript