laravel-security

Name: laravel-security
Availability: InStock
Author: elmochilyas

Audit Laravel 13 applications for security vulnerabilities and enforce best practices.

8|Updated Jun 1, 2026

Search Tags:#security #sql injection #xss #laravel #csrf #mass assignment

Ready to run

npx skills add https://github.com/elmochilyas/laraskills --skill laravel-security-elmochilyas

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: laravel-security
Source: https://github.com/elmochilyas/laraskills/tree/main/skills/laravel-security
Command: npx skills add https://github.com/elmochilyas/laraskills --skill laravel-security-elmochilyas

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps secure Laravel 13 applications by auditing and enforcing security best practices, including mass assignment protection, SQL injection prevention, XSS/PAO, CSRF, authentication, authorization, input validation, rate limiting, HTTP security headers, session security, CORS, file uploads, dependency auditing, APP_KEY rotation, and production hardening.

Core Features & Use Cases

Security Auditing: Identifies potential security vulnerabilities in Laravel 13 applications.
Best Practices Enforcement: Ensures that security best practices are followed during development.
Use Case: When developing or auditing a Laravel 13 application, use this Skill to ensure it is secure against common web application vulnerabilities.

Quick Start

Use the laravel-security skill to scan your Laravel 13 application for security vulnerabilities.

Frequently Asked Questions about laravel-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit my Laravel application for SQL injection and mass assignment vulnerabilities?▼

You can audit Laravel applications for SQL injection and mass assignment vulnerabilities by enforcing $fillable arrays and parameterized queries. This Skill scans Laravel 13 codebases to identify unprotected models and raw query execution risks.

What's the best way to prevent XSS and CSRF attacks in Laravel 13?▼

Preventing XSS and CSRF attacks in Laravel 13 involves enforcing strict blade output escaping and verifying CSRF tokens on state-changing requests. This Skill audits your application to ensure these security best practices are actively enforced.

How do I configure HTTP security headers and CORS for a Laravel production environment?▼

Configuring HTTP security headers and CORS for Laravel production environments requires setting strict header policies and valid CORS origins. This Skill audits your configuration to enforce production hardening and secure cross-origin resource sharing.

Does this Laravel security check cover dependency auditing and APP_KEY rotation?▼

Yes, Laravel security checks cover dependency auditing and APP_KEY rotation. This Skill evaluates your application's dependencies for known vulnerabilities and verifies proper APP_KEY rotation procedures for production hardening.

How do I implement rate limiting and secure session management in Laravel?▼

Implementing rate limiting and secure session management in Laravel requires configuring throttle middleware and secure cookie settings. This Skill audits your authentication and session configurations to enforce rate limiting and session security best practices.