skills.rest
M-Kolacz
M-KolaczCOMMUNITY
Explore all skills by this author →
𝕏@M_KolaczGitHub

epic-security

Harden Epic Stack applications with CSP, rate limiting, and secure headers.

Updated Jan 31, 2026
Search Tags:#security#CSP#session#input-validation#rate-limiting#Epic Stack
One-click install
npx skills add https://github.com/M-Kolacz/michalkolacz.com --skill epic-security-m-kolacz
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: epic-security
Source: https://github.com/M-Kolacz/michalkolacz.com/tree/main/docs/skills/epic-security
Command: npx skills add https://github.com/M-Kolacz/michalkolacz.com --skill epic-security-m-kolacz

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams implement a cohesive security posture across Epic Stack applications, reducing misconfigurations and security debt by providing practical guidance on CSP, rate limiting, session security, and secure headers.

Core Features & Use Cases

  • Content Security Policy (CSP) configuration and validation to prevent XSS and data leakage.
  • Rate limiting strategies to protect public APIs and sensitive routes.
  • Session security with httpOnly cookies, secure flags, and secret rotation.
  • Input validation & sanitization using robust schemas to prevent injection attacks.
  • Secure headers and best practices for privacy and protection.
  • Secrets management guidelines and safe rotation practices。

Quick Start

Implement the core security patterns in a new Epic Stack project by enabling CSP headers, setting up session storage with httpOnly cookies, applying rate limits on critical routes, and validating inputs with standard schemas as outlined in this guide.

Frequently Asked Questions about epic-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Content Security Policy headers for an Epic Stack application?▼

To configure Content Security Policy (CSP) headers for an Epic Stack application, apply Helmet-based header configurations and validate them using the provided practical patterns to prevent XSS and data leakage.

What's the best way to implement rate limiting and spam protection on public APIs?▼

The best way to implement rate limiting and spam protection on public APIs is by applying rate limit strategies to sensitive routes and integrating honeypot-based spam protection to block malicious requests.

How do I secure user sessions with httpOnly cookies in an Epic Stack project?▼

To secure user sessions with httpOnly cookies in an Epic Stack project, set up session storage using httpOnly cookies, enable secure flags, and follow the provided secret rotation practices.

Does Epic Stack require schema-based input validation to prevent injection attacks?▼

Yes, Epic Stack security hardening requires robust schema-based input validation and sanitization to prevent injection attacks and satisfy fail-fast checks with explicit error messages.

Why do I need HTTPS redirects and Helmet for secure headers in my application?▼

You need HTTPS redirects and Helmet for secure headers in your application to enforce encrypted connections and ensure privacy protection by codifying best practices across development and production environments.

Related Skills

Explore More Software Engineering Skills→
b0aseb0ase

vps-hardening

Automate VPS security hardening with SSH, firewall, Fail2ban, and kernel settings.

Community
Advanced
walbucwalbuc

epic-security

Apply CSP, rate limiting, honeypots, and secure headers to Epic Stack deployments.

Community
Advanced
AdigunQAdigunQ

supabase-node

Develop full-stack Node.js apps with Express or Hono, Supabase, and Drizzle ORM.

Community
Intermediate
tonone-aitonone-ai
69

warden-harden

Harden web services with authentication, input validation, rate limiting, and security headers.

Official
Advanced