laravel-security

Harden Laravel applications against common security vulnerabilities.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/yusufcmg/Agent_Memory_Systems --skill laravel-security-yusufcmg
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: laravel-security
Source: https://github.com/yusufcmg/Agent_Memory_Systems/tree/main/.claude/skills/laravel-security
Command: npx skills add https://github.com/yusufcmg/Agent_Memory_Systems --skill laravel-security-yusufcmg

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Laravel security best practices to protect Laravel apps from common vulnerabilities, covering authn/authz, input validation, CSRF, mass assignment, file uploads, secret management, rate limiting, and secure deployment.

Core Features & Use Cases

  • Middleware-based protections for CSRF and security headers.
  • Guards, policies, and Form Requests enforce access control and data validation.
  • Guidance for secret management, rate limiting, and secure deployment in production.

Quick Start

Run the Laravel security guidelines to harden a new or existing project.

Frequently Asked Questions about laravel-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I protect my Laravel app from common security vulnerabilities?

Protect your Laravel app from common security vulnerabilities by enforcing secure defaults, applying middleware for CSRF and security headers, and using Form Requests for strict input validation.

What's the best way to handle authentication and authorization in Laravel?

Handle Laravel authentication and authorization by configuring guards and policies to enforce strict access control, ensuring users only interact with resources they are explicitly permitted to access.

How do I implement CSRF protection and secure headers in Laravel?

Implement Laravel CSRF protection and secure headers by applying middleware-based protections across your application, which automatically validates tokens and enforces secure HTTP response configurations.

How do I securely manage secrets and tokens during Laravel deployment?

Securely manage secrets and tokens during Laravel deployment by following safe handling guidelines, ensuring sensitive credentials are kept out of source code and properly configured for production environments.

Can I use Form Requests to prevent mass assignment vulnerabilities in Laravel?

Use Laravel Form Requests to prevent mass assignment vulnerabilities by validating incoming data and explicitly defining allowed fields, ensuring only authorized data populates your models.

How do I configure rate limiting to secure my Laravel API endpoints?

Configure Laravel rate limiting to secure API endpoints by applying middleware that restricts request frequency, protecting your application from brute force and abuse attempts.