skills.rest
BaraArdiwinata
BaraArdiwinataCOMMUNITY
Explore all skills by this author →
GitHub

security-and-hardening

Implements security-first practices for web applications, including input validation and password hashing.

1|Updated May 26, 2026
Search Tags:#input validation#session management#database security#web security#dependency auditing
One-click install
npx skills add https://github.com/BaraArdiwinata/hackathon-sima-arome --skill security-and-hardening-baraardiwinata
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/BaraArdiwinata/hackathon-sima-arome/tree/main/.agents/skills/security-and-hardening
Command: npx skills add https://github.com/BaraArdiwinata/hackathon-sima-arome --skill security-and-hardening-baraardiwinata

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses security vulnerabilities in web applications by implementing best practices for handling user input, authentication, data storage, and external integrations.

Core Features & Use Cases

  • Input Validation: Validates all external input at the system boundary.
  • Database Security: Parameterizes all database queries to prevent SQL injection.
  • Output Encoding: Encodes output to prevent XSS attacks.
  • HTTPS: Ensures all external communication is secure.
  • Password Hashing: Uses bcrypt/scrypt/argon2 to hash passwords securely.
  • Security Headers: Sets security headers like CSP, HSTS, and X-Frame-Options.
  • Session Management: Manages user sessions with secure cookies.
  • Dependency Auditing: Runs npm audit to check for vulnerabilities in dependencies.
  • Use Case: Use this Skill to build a secure web application that handles sensitive user data and interacts with third-party services.

Quick Start

Use the security-and-hardening skill to audit your application for common security vulnerabilities.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS attacks in my web application?▼

To prevent SQL injection and XSS attacks, you must parameterize database queries and encode all output. This approach validates external input at the system boundary, ensuring user data is safely handled before rendering or storage.

What is the best way to hash passwords and manage secure user sessions?▼

The best way to hash passwords and manage user sessions is using bcrypt, scrypt, or argon2 for hashing, alongside secure cookies for session management. This ensures credentials remain protected during authentication flows.

How do I set security headers like CSP and HSTS for HTTPS communication?▼

Setting security headers like CSP and HSTS involves configuring your web server to enforce secure HTTPS communication. These headers prevent malicious content execution and ensure all external data exchanges remain encrypted.

How do I check for vulnerabilities in my project dependencies using npm audit?▼

Checking for vulnerabilities in project dependencies using npm audit involves scanning your dependency tree for known security flaws. This auditing process identifies at-risk packages so you can update them and maintain a secure application state.

Does this security-first approach work for applications handling sensitive user data?▼

Yes, this security-first approach works effectively for applications handling sensitive user data. It provides comprehensive protection by validating external input, securing data storage, and managing authentication safely during third-party integrations.

Related Skills

Explore More Software Engineering Skills→
333-333-333333-333-333

go-service-bootstrap

Bootstrap Go services with dependency wiring and environment-based configuration.

Community
Intermediate
dapperdiversdapperdivers
1

vuln-scan

Scan web applications for vulnerabilities using nuclei and nikto.

Community
Advanced
pluginagentmarketplacepluginagentmarketplace
3

automated-testing

Run Python-based prompt-injection and adversarial security tests in CI/CD pipelines.

Community
Intermediate
zzw4257zzw4257

ModSecurity

Deploys and configures ModSecurity to inspect HTTP traffic and block malicious requests.

Community
Intermediate