skills.rest
elmochilyas
elmochilyasCOMMUNITY
Explore all skills by this author →
GitHub

laravel-security

Audit Laravel 13 applications for security vulnerabilities and enforce best practices.

8|Updated Jun 1, 2026
Search Tags:#security#sql injection#xss#laravel#csrf#mass assignment
One-click install
npx skills add https://github.com/elmochilyas/laraskills --skill laravel-security-elmochilyas
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: laravel-security
Source: https://github.com/elmochilyas/laraskills/tree/main/skills/laravel-security
Command: npx skills add https://github.com/elmochilyas/laraskills --skill laravel-security-elmochilyas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps secure Laravel 13 applications by auditing and enforcing security best practices, including mass assignment protection, SQL injection prevention, XSS/PAO, CSRF, authentication, authorization, input validation, rate limiting, HTTP security headers, session security, CORS, file uploads, dependency auditing, APP_KEY rotation, and production hardening.

Core Features & Use Cases

  • Security Auditing: Identifies potential security vulnerabilities in Laravel 13 applications.
  • Best Practices Enforcement: Ensures that security best practices are followed during development.
  • Use Case: When developing or auditing a Laravel 13 application, use this Skill to ensure it is secure against common web application vulnerabilities.

Quick Start

Use the laravel-security skill to scan your Laravel 13 application for security vulnerabilities.

Frequently Asked Questions about laravel-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Laravel application for SQL injection and mass assignment vulnerabilities?▼

You can audit Laravel applications for SQL injection and mass assignment vulnerabilities by enforcing $fillable arrays and parameterized queries. This Skill scans Laravel 13 codebases to identify unprotected models and raw query execution risks.

What's the best way to prevent XSS and CSRF attacks in Laravel 13?▼

Preventing XSS and CSRF attacks in Laravel 13 involves enforcing strict blade output escaping and verifying CSRF tokens on state-changing requests. This Skill audits your application to ensure these security best practices are actively enforced.

How do I configure HTTP security headers and CORS for a Laravel production environment?▼

Configuring HTTP security headers and CORS for Laravel production environments requires setting strict header policies and valid CORS origins. This Skill audits your configuration to enforce production hardening and secure cross-origin resource sharing.

Does this Laravel security check cover dependency auditing and APP_KEY rotation?▼

Yes, Laravel security checks cover dependency auditing and APP_KEY rotation. This Skill evaluates your application's dependencies for known vulnerabilities and verifies proper APP_KEY rotation procedures for production hardening.

How do I implement rate limiting and secure session management in Laravel?▼

Implementing rate limiting and secure session management in Laravel requires configuring throttle middleware and secure cookie settings. This Skill audits your authentication and session configurations to enforce rate limiting and session security best practices.

Related Skills

Explore More Software Engineering Skills→
truongnattruongnat

security-review

Audits code for OWASP Top 10 vulnerabilities, hardcoded secrets, and unsafe patterns.

Community
Advanced
nekorush14nekorush14
4

rails-security

Implement security best practices for Rails authentication, authorization, and API protection.

Community
Intermediate
mgkyawzayyamgkyawzayya
1

security-review

Audit Laravel and React code for OWASP Top 10 vulnerabilities.

Community
Advanced
adityaarsharmaadityaarsharma
2

orbit-wp-security

Detect security vulnerabilities in WordPress plugin PHP source code via static analysis.

Community
Advanced