0118-spatie-security

Apply Spatie security best practices to application, database, and server configurations during review.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/MrJmpl3/codex_____data_____configuration --skill 0118-spatie-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: 0118-spatie-security
Source: https://github.com/MrJmpl3/codex_____data_____configuration/tree/main/skills/0118-spatie-security
Command: npx skills add https://github.com/MrJmpl3/codex_____data_____configuration --skill 0118-spatie-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Strengthens application, database, and server security by turning widely recommended best practices into a clear checklist you can apply during configuration and code review.

Core Features & Use Cases

  • Application security: Enforce SSL, CSRF protection, correct HTTP methods for sensitive actions, and add authorization tests to catch access-control gaps.
  • Database security: Hash stored passwords, encrypt sensitive keys, use least-privilege database users, and restrict database connectivity to trusted hosts.
  • Server hardening & credential management: Keep software updated, harden SSH, enable automatic security updates, limit firewall exposure, manage access via Ansible, and protect secrets with password managers and strong key handling.

Quick Start

Apply the listed Spatie security guidelines to your current application, database, and server configuration by reviewing each section and fixing any mismatches you find.

Frequently Asked Questions about 0118-spatie-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden my application and server using Spatie security best practices?

Application and server security hardening involves enforcing SSL-only HTTP traffic, CSRF tokens, least-privilege database users, hardened SSH, and restricted firewall exposure. Review configurations against established guidelines to fix mismatches and reduce risk.

What is the best way to manage database permissions and stored credentials securely?

Secure database permissions and credential management require least-privilege database users, restricted host connectivity, hashed passwords, encrypted API keys, and secrets protected by password managers. Review database configurations to ensure sensitive keys are properly encrypted.

How do I configure CSRF protection and authorization testing for sensitive actions?

CSRF protection and authorization testing require verifying CSRF tokens on forms and adding authorization tests to catch access-control gaps. Ensure sensitive actions use correct HTTP methods and enforce SSL-only traffic to prevent unauthorized modifications.

Does this security hardening checklist support Ansible for server access management?

Server hardening supports Ansible for managing access control. This includes keeping software updated, enabling automatic security updates, hardening SSH configurations, and limiting firewall exposure to control infrastructure patch workflows effectively.

When should I avoid using least-privilege database users for application security?

Least-privilege database users should not be avoided in application security. Restricting database connectivity to trusted hosts and limiting user permissions are fundamental Spatie guidelines that consistently reduce security risk across all deployment scenarios.

Why does my server hardening workflow require restricted host access and firewall limits?

Server hardening requires restricted host access and firewall limits to minimize attack surface exposure. Limiting connectivity to trusted hosts and controlling firewall rules ensure that only authorized traffic reaches databases and sensitive infrastructure.