Identify and mitigate common web security risks in code, configurations, and deployments.
npx skills add https://github.com/aiyuekuang/LLMProxy --skill security-aiyuekuang
Please help me install this Agent Skill. Skill: security Source: https://github.com/aiyuekuang/LLMProxy/tree/main/.windsurf/skills/security Command: npx skills add https://github.com/aiyuekuang/LLMProxy --skill security-aiyuekuang
Security best practices for web applications help prevent common vulnerabilities by guiding authentication, authorization, input validation, and secure deployment configurations.
Apply these guidelines to audit and harden your codebase for authentication, authorization, input validation, and secure configurations.
High-intent search queries and answers about installing and using this skill.
Secure password hashing and token validation protect web apps by ensuring credentials are safely stored and JWT tokens are properly verified. Practical guidelines include using strong hashing algorithms and validating token signatures to prevent unauthorized access.
RBAC, or Role-Based Access Control, is an authorization mechanism that restricts API access based on user roles. It works by assigning permissions to roles, ensuring users only access endpoints their role permits, mitigating common web security risks.
Securing an API endpoint with JWT-based authentication involves validating token integrity and applying strict input validation to prevent injection attacks. This approach hardens web apps by ensuring only authenticated requests with sanitized data reach your logic.
Best practices for secure session management and HTTP headers involve configuring headers like CSP and HSTS, alongside proper session expiration and token handling. These practices harden deployments by mitigating common web vulnerabilities and protecting data.
You need to audit your codebase for secure coding and deployment configurations when hardening web apps against common vulnerabilities. This involves reviewing authentication, authorization, input validation, and secure HTTP headers to identify and mitigate risks.
gil00pitaAnalyze codebases to map architecture, dependencies, and data flows.
webdevtodayjasonIdentifies and remediates web application security vulnerabilities including OWASP Top 10, SQL injection, XSS, and CSRF.
briannadoubtEnforce authentication, authorization, rate limiting, and request validation for Trebuchet actors.
utsavthakurAnalyze web applications for cache deception and poisoning vulnerabilities.
