laravel-security

Enforce Laravel authentication, authorization, input validation, and deployment hardening.

2|Updated Mar 20, 2026
One-click install
npx skills add https://github.com/multiplex-ai/muggle-ai-teams --skill laravel-security-multiplex-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laravel-security
Source: https://github.com/multiplex-ai/muggle-ai-teams/tree/main/skills/laravel-security
Command: npx skills add https://github.com/multiplex-ai/muggle-ai-teams --skill laravel-security-multiplex-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Laravel security gaps can emerge during rapid development, leaving authentication, authorization, input validation, CSRF, and deployment practices vulnerable.

Core Features & Use Cases

  • Enforces CSRF protection via middleware, validates inputs with Form Requests, and enforces authorization with policies and gates.
  • Applies robust defaults for secrets, environment configuration, rate limiting, and signed routes to protect data and deployments.
  • Use case: securing APIs, forms, and file uploads in both development and production environments, with clear guidance for hardening.

Quick Start

Apply the Laravel security baseline to a new project and implement the recommended hardening steps.

Frequently Asked Questions about laravel-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure a Laravel API with authentication and rate limiting?

To secure Laravel APIs, configure authentication guards, enforce authorization policies, and apply rate limiting via middleware to control traffic and protect endpoints.

What is the best way to enforce input validation and CSRF protection in Laravel?

The best way to enforce input validation and CSRF protection is by using Form Requests for validation data and applying CSRF middleware to verify tokens on form submissions, ensuring malicious input is blocked.

When do I need signed routes and encrypted attributes in Laravel?

You need signed routes when protecting public URLs from tampering, and encrypted attributes when storing sensitive data in the database. Both maintain data integrity during development and production deployment.

Does this Laravel security baseline apply to both development and production environments?

Yes, the Laravel security baseline applies to development, staging, and production environments, providing clear guidance for hardening applications using secure defaults.

How do I secure file uploads in Laravel?

To secure file uploads in Laravel, validate inputs using Form Requests and enforce authorization policies or gates. This ensures only permitted users submit files and all uploads meet strict validation rules.

Why does my Laravel application have security gaps during rapid development?

Laravel security gaps emerge during rapid development when authentication, authorization, input validation, and deployment practices are not fully configured. Applying a baseline of middleware, guards, and secure defaults prevents these vulnerabilities.