security-and-hardening

Harden web applications against OWASP Top 10 vulnerabilities with threat modeling.

Updated May 25, 2026
One-click install
npx skills add https://github.com/huuhiep0303/s-tools --skill security-and-hardening-huuhiep0303
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/huuhiep0303/s-tools/tree/main/.agents/skills/security-and-hardening
Command: npx skills add https://github.com/huuhiep0303/s-tools --skill security-and-hardening-huuhiep0303

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides comprehensive security hardening practices to protect your web applications against vulnerabilities and ensure secure handling of user data.

Core Features & Use Cases

  • Security-First Development: Emphasizes treating every external input as hostile and every secret as sacred.
  • Threat Modeling: Encourages mapping trust boundaries and identifying assets to prevent common attacks.
  • Boundary System: Defines what should always be done, what requires human approval, and what should never be done.
  • OWASP Top 10: Offers prevention patterns for the most common security vulnerabilities.
  • Input Validation: Provides guidelines for schema validation and file upload safety.
  • AI/LLM Security: Includes best practices for securing AI and LLM features.

Quick Start

Run the security-and-hardening skill to apply security best practices to your codebase.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden web application code against OWASP Top 10 vulnerabilities?

Web application hardening enforces security-first development practices, implements threat modeling, and applies OWASP Top 10 prevention patterns to secure code against vulnerabilities.

What's the best way to secure user input and file uploads in web applications?

Securing user input requires treating every external input as hostile, enforcing schema validation, and applying strict file upload safety guidelines to prevent common web application attacks.

Does this security hardening approach work for AI and LLM features?

Yes, this hardening approach includes specific best practices for securing AI and LLM features, ensuring safe integration and preventing vulnerabilities in machine learning components.

Can I use threat modeling to protect external integrations and authentication flows?

Threat modeling maps trust boundaries and identifies critical assets to protect authentication flows and external integrations, ensuring secure handling of user data across web application boundaries.

How do I start applying security-first development practices to my codebase?

Run the security hardening process to apply best practices to your codebase, enforcing boundary systems that define what should always be done, what requires approval, and what is prohibited.