epic-security

Apply CSP, rate limiting, honeypots, and secure headers to Epic Stack deployments.

Updated Jan 29, 2026
One-click install
npx skills add https://github.com/walbuc/iac-sorteios --skill epic-security-walbuc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: epic-security
Source: https://github.com/walbuc/iac-sorteios/tree/main/docs/skills/epic-security
Command: npx skills add https://github.com/walbuc/iac-sorteios --skill epic-security-walbuc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security for Epic Stack apps is often overlooked, leaving surfaces exposed to CSP, rate limiting, session, and header-related risks. This guide consolidates proven security practices into a practical, repeatable approach.

Core Features & Use Cases

  • Centralized CSP configuration and enforcement across server and client boundaries.
  • Rate limiting, honeypot-based anti-spam, and secure headers to protect sensitive routes.
  • Secure session management and secret handling aligned with Epic Stack patterns.

Quick Start

Configure CSP, rate limiting, and secure headers for Epic Stack deployments.

Frequently Asked Questions about epic-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure CSP and secure headers for Epic Stack apps?

To configure CSP and secure headers for Epic Stack apps, you apply centralized Content Security Policy rules across server and client boundaries. This guide uses helmet-based headers to enforce protections and secure frontend routes in real-world deployments.

What is the best way to implement rate limiting and session security in Epic Stack?

The best way to implement rate limiting and session security in Epic Stack involves enforcing fail-fast validation and using httpOnly cookies. This approach protects sensitive backend routes and guards against common session-related threats.

How do honeypots work for anti-spam protection in Epic Stack deployments?

Honeypots for anti-spam protection in Epic Stack deployments work by integrating hidden fields to detect bots. This Skill applies honeypot-based anti-spam alongside rate limiting to prevent automated attacks on your web apps.

Does Epic Stack support environment-driven secret management?

Yes, Epic Stack supports environment-driven secret management to guard against common threats. This Skill enforces patterns for secure session management and secret handling aligned with native Epic Stack environment configurations.

Can I use fail-fast validation to protect API routes in an Epic Stack application?

Yes, you can use fail-fast validation to protect API routes in an Epic Stack application. This Skill applies fail-fast validation patterns alongside secure headers and rate limiting to protect sensitive backend routes from common threats.