What problem does it solve? Laravel applications are exposed to common vulnerabilities like SQL injection, XSS, CSRF, mass assignment, and insecure file uploads when developers skip hardening steps. This Skill provides concrete, code-level security guidance so you can protect auth flows, user input, secrets, and production deployments without researching each attack vector separately. ## Core Features & Use Cases - Authentication & Authorization: Configure Sanctum/Passport token auth, password hashing rules, policies, gates, and route-level can middleware. - Input & Upload Safety: Enforce Form Request validation, mass-assignment guards, MIME/size checks for uploads, and private disk storage. - Production Hardening: Apply security headers (CSP, HSTS, X-Frame-Options), CORS restrictions, rate limiting, signed URLs, encrypted casts, and PII-safe logging. - Use Case: When building a new API endpoint that accepts invoice PDF uploads, use this Skill to add an UploadInvoiceRequest with authorization and mimes:pdf validation, store files on a non-public disk, and protect the route with auth:sanctum plus a throttle limiter. ## Quick Start Review my Laravel controller and routes for security issues and add the missing validation, authorization, and rate limiting protections.
