security-and-hardening

Harden serverless Go and Terraform architectures with threat modeling and OWASP compliance.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/dmarins/sdd --skill security-and-hardening-dmarins
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/dmarins/sdd/tree/main/skills/security-and-hardening
Command: npx skills add https://github.com/dmarins/sdd --skill security-and-hardening-dmarins

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill addresses the critical need for robust security posture in serverless and cloud-native architectures, preventing vulnerabilities like injection, unauthorized access, and data leaks before they reach production.

Core Features & Use Cases

  • Threat Modeling: Provides a structured framework to identify trust boundaries and potential attack vectors using the STRIDE methodology.
  • Security Hardening: Offers actionable patterns for input validation, IAM least-privilege policies, and secure secret management.
  • LLM Security: Includes specific guardrails for AI-integrated applications to prevent prompt injection and excessive agency.

Quick Start

Use the security-and-hardening skill to perform a threat model analysis on the current authentication module and suggest necessary security controls.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform threat modeling for serverless Go and Terraform architectures?

Threat modeling for serverless Go and Terraform architectures uses the STRIDE methodology to identify trust boundaries and potential attack vectors across the entire development lifecycle. This skill provides a structured framework to map out and mitigate injection, unauthorized access, and data leak vulnerabilities before production deployment.

What is the best way to enforce least-privilege IAM policies in cloud-native applications?

Enforcing least-privilege IAM policies in cloud-native applications involves applying actionable security hardening patterns to infrastructure configuration and secure secret management. This skill offers specific patterns to restrict permissions tightly and satisfy OWASP compliance requirements for serverless environments.

Can I use this security hardening approach for LLM-integrated applications?

Security hardening for LLM-integrated applications provides specific guardrails designed to prevent prompt injection and excessive agency. This skill includes dedicated controls for AI-integrated applications to ensure large language model interactions remain securely bounded within cloud-native architectures.

Does this approach support secure supply chain management for Terraform-based cloud configurations?

Secure supply chain management for Terraform-based cloud configurations is fully supported to prevent vulnerabilities from reaching production. The skill implements comprehensive hardening across the development lifecycle, covering initial design, input validation, and infrastructure configuration to satisfy OWASP compliance.

How do I validate inputs to prevent injection vulnerabilities in serverless Go applications?

Validating inputs to prevent injection vulnerabilities in serverless Go applications requires applying actionable security hardening patterns during the development lifecycle. This skill offers structured threat modeling and validation controls to proactively block injection attacks before they reach production.