skills.rest
harishgovardhandamodar
harishgovardhandamodarCOMMUNITY
Explore all skills by this author →
GitHub

security-and-hardening

Apply validation, parameterized queries, secure headers, and secrets handling to harden code.

Updated Apr 8, 2026
Search Tags:#security#owasp#input-validation#rate-limiting#hardening#secrets-management#secure-auth
One-click install
npx skills add https://github.com/harishgovardhandamodar/adversarialStudy --skill security-and-hardening-harishgovardhandamodar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/harishgovardhandamodar/adversarialStudy/tree/main/Distributionally-Adversarial-Attack/.agents/skills/security-and-hardening
Command: npx skills add https://github.com/harishgovardhandamodar/adversarialStudy --skill security-and-hardening-harishgovardhandamodar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Establishes practical, repeatable controls and developer guidance to prevent common web application vulnerabilities and misconfigurations so applications do not leak data or permit unauthorized access.

Core Features & Use Cases

  • Input validation & sanitization at system boundaries to block injection and malformed data.
  • Authentication and session hardening including secure cookies, password hashing, and auth flow reviews.
  • Access control and least privilege checks to ensure users can only access their resources.
  • Infrastructure and runtime defenses such as security headers, CORS restrictions, rate limiting, and dependency audit triage.
  • Secrets and configuration management guidance to avoid committing credentials and to use environment variables and vaults.
  • Use case: Run this checklist when adding new API endpoints, file upload handlers, third-party integrations, or any feature that processes user-provided data.

Quick Start

Apply this security-and-hardening checklist to review and harden the project's API endpoints, authentication flows, and data handling paths.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden web application authentication and session cookies against common vulnerabilities?▼

Apply input validation, parameterized queries, and access control checks to API endpoints and file upload handlers to block injection attacks and enforce least privilege for users processing untrusted data.

What is the best way to manage secrets and configuration to avoid committing credentials?▼

Limit API abuse by applying rate limiting, configuring restrictive CORS policies, and setting security headers to establish infrastructure and runtime defenses against unauthorized requests and malicious traffic.

Can I use this hardening checklist for third-party integrations that process user-provided data?▼

Yes, apply the hardening checklist to third-party integrations, new API endpoints, and file upload handlers to validate untrusted data and prevent common web application vulnerabilities and misconfigurations.

How do I mitigate OWASP Top 10 vulnerabilities when adding new API routes?▼

Mitigate OWASP Top 10 vulnerabilities in new API routes by enforcing input sanitization at system boundaries, parameterizing queries, and triaging dependencies to block malformed data and known exploits.

Related Skills

Explore More Software Engineering Skills→
ybbms777ybbms777
1

security-reviewer

Trace attack paths from untrusted inputs to dangerous sinks in code diffs.

Community
Intermediate
jcuervojcuervo

rails-security

Harden Rails 8.1 apps with rate limiting, secrets management, and security headers.

Community
Advanced
netresearchnetresearch
51

security-audit

Detect security vulnerabilities in PHP applications and score risks with CVSS v3.1.

Official
Advanced
zzw4257zzw4257

ModSecurity

Deploys and configures ModSecurity to inspect HTTP traffic and block malicious requests.

Community
Intermediate