security

Identify and mitigate common web security risks in code, configurations, and deployments.

14|4|Updated Jan 14, 2026

Search Tags:#authorization #security #authentication #rbac #input-validation #secure-coding #http-headers

Ready to run

npx skills add https://github.com/aiyuekuang/LLMProxy --skill security-aiyuekuang

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/aiyuekuang/LLMProxy/tree/main/.windsurf/skills/security
Command: npx skills add https://github.com/aiyuekuang/LLMProxy --skill security-aiyuekuang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security best practices for web applications help prevent common vulnerabilities by guiding authentication, authorization, input validation, and secure deployment configurations.

Core Features & Use Cases

Guidance for securing APIs, web apps, and deployments
Code examples for password hashing, token validation, session management, and RBAC
Use case: secure an API endpoint with JWT-based authentication and proper input validation

Quick Start

Apply these guidelines to audit and harden your codebase for authentication, authorization, input validation, and secure configurations.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement secure password hashing and token validation for web apps?▼

Secure password hashing and token validation protect web apps by ensuring credentials are safely stored and JWT tokens are properly verified. Practical guidelines include using strong hashing algorithms and validating token signatures to prevent unauthorized access.

What is RBAC and how does it work for API authorization?▼

RBAC, or Role-Based Access Control, is an authorization mechanism that restricts API access based on user roles. It works by assigning permissions to roles, ensuring users only access endpoints their role permits, mitigating common web security risks.

How do I secure an API endpoint with JWT-based authentication and input validation?▼

Securing an API endpoint with JWT-based authentication involves validating token integrity and applying strict input validation to prevent injection attacks. This approach hardens web apps by ensuring only authenticated requests with sanitized data reach your logic.

What are the best practices for secure session management and HTTP headers?▼

Best practices for secure session management and HTTP headers involve configuring headers like CSP and HSTS, alongside proper session expiration and token handling. These practices harden deployments by mitigating common web vulnerabilities and protecting data.

When do I need to audit my codebase for secure coding and deployment configurations?▼

You need to audit your codebase for secure coding and deployment configurations when hardening web apps against common vulnerabilities. This involves reviewing authentication, authorization, input validation, and secure HTTP headers to identify and mitigate risks.