Laravel Security

What problem does it solve?

This Skill addresses common security vulnerabilities and enforces best practices for hardening Laravel applications, ensuring robust protection against common threats.

Core Features & Use Cases

• Policy Enforcement: Guides the implementation of model-level permissions using Policies and Gates.
• Secure Configuration: Prevents insecure direct use of environment variables, promoting the use of Laravel's configuration system.
• Input Validation: Emphasizes strict validation through Form Requests to mitigate injection attacks.
• Use Case: A developer can use this skill to audit an existing Laravel application for security flaws related to authorization, configuration, and input handling, and receive actionable guidance for remediation.

Quick Start

Apply the Laravel Security skill to review the authorization logic in the app/Policies directory and the configuration files.