laravel-security

Audit Laravel 12 and PHP 8.3+ applications for OWASP Top 10 vulnerabilities.

Updated Apr 15, 2026
One-click install
npx skills add https://github.com/gab3mioni/laravel-claudecode-toolkit --skill laravel-security-gab3mioni
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laravel-security
Source: https://github.com/gab3mioni/laravel-claudecode-toolkit/tree/main/skills/laravel-security
Command: npx skills add https://github.com/gab3mioni/laravel-claudecode-toolkit --skill laravel-security-gab3mioni

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the complexity of maintaining a secure Laravel 12 application by providing a comprehensive, automated audit and hardening framework that covers everything from OWASP Top 10 compliance to dependency hygiene.

Core Features & Use Cases

  • Automated Security Audits: Executes a battery of grep-based checks to identify vulnerabilities like mass assignment, XSS, and insecure configuration.
  • Production Hardening: Provides a standardized checklist and command-line verification for production-ready security settings.
  • Dependency Hygiene: Integrates automated scanning for CVEs in both PHP and JavaScript ecosystems.

Quick Start

Invoke the laravel-security skill to perform a full security audit of the current application and generate a report of findings.

Frequently Asked Questions about laravel-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit my Laravel application for OWASP Top 10 vulnerabilities?

You can audit a Laravel 12 application for OWASP Top 10:2025 vulnerabilities by running automated grep-based checks that identify mass assignment, SQL injection, XSS, and insecure configurations. This process generates a detailed report of the security posture findings.

What is the best way to harden Laravel 12 for production?

The best way to harden Laravel 12 for production is by applying standardized configuration checklists and command-line verification. This skill implements defense-in-depth strategies to ensure critical production-ready security settings are properly enforced across the application.

How do I check PHP and JavaScript dependencies for CVEs in Laravel?

To check PHP and JavaScript dependencies for CVEs in Laravel, you use automated scanning integrated into the security audit workflow. This dependency hygiene check identifies known supply chain vulnerabilities within your project's ecosystem.

Does this security audit cover mass assignment and CSRF protection in Laravel?

Yes, this security audit covers mass assignment and CSRF protection in Laravel. It specifically targets these critical areas alongside SQL injection and XSS detection to provide comprehensive vulnerability identification based on OWASP standards.

Can I use this for PHP 8.3 applications or does it only support Laravel 12?

You can use this for PHP 8.3 applications, as it performs security posture audits specifically designed for Laravel 12 and PHP 8.3+ environments. The automated detection mechanisms are tailored to this technology stack.