Implement security practices for Epic Stack applications.
npx skills add https://github.com/epicweb-dev/epic-stack --skill epic-security
Please help me install this Agent Skill. Skill: epic-security Source: https://github.com/epicweb-dev/epic-stack/tree/main/docs/skills/epic-security Command: npx skills add https://github.com/epicweb-dev/epic-stack --skill epic-security
Epic Stack security guidance to help developers implement CSP, rate-limiting, session security, and secure headers across web applications.
Audit an Epic Stack project for CSP, rate limiting, and secure headers, then apply the recommended defaults to improve security.
High-intent search queries and answers about installing and using this skill.
Configuring CSP in an Epic Stack application involves setting secure headers to restrict resource loading and reporting violations. This skill guides you through applying default policy configurations across your routes to enforce client-side security.
The best way to add rate limiting and honeypot protections is to apply automated request throttling and bot mitigation middleware. This skill provides actionable guidance to configure these defenses across your application APIs to prevent abuse.
Securing user sessions and managing secrets requires implementing validated input handling and encrypted environment variable storage. This skill offers practical steps to lock down session data and safely manage application secrets.
This security guidance works for both auditing existing routes and securing new APIs. You can audit an existing Epic Stack project for missing secure headers and rate limits, then immediately apply the recommended defaults.
Input validation for API security is needed to prevent injection attacks by ensuring only correctly formatted data enters your system. This skill helps you implement validation strategies to protect endpoints from malicious payloads.
Snowflake-LabsA concise summary of your roleplay character: name,</name> personality, and/or behavior, formatted as a single string sentence. Typically不超过50字，此处省略
peopleforresterHarden Django applications with HTTPS, CSRF, CSP, and secure cookie settings.
M-KolaczSecure Epic Stack authentication with sessions, OAuth, 2FA, and WebAuthn.
saint2706Implement security best practices for Express.js web applications and APIs.
