skills.rest
j-cogburn
j-cogburnCOMMUNITY
Explore all skills by this author →
GitHub

security-and-hardening

Eliminate common web application vulnerabilities to meet OWASP Top 10 standards.

Updated Jun 1, 2026
Search Tags:#security#input validation#owasp#secrets management#web security#vulnerability prevention#hardening
One-click install
npx skills add https://github.com/j-cogburn/d3 --skill security-and-hardening-j-cogburn
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/j-cogburn/d3/tree/main/tests/project-t01/.d3/skills/security-and-hardening
Command: npx skills add https://github.com/j-cogburn/d3 --skill security-and-hardening-j-cogburn

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Web applications are frequently targeted by attackers exploiting common security flaws such as injection vulnerabilities, broken authentication, cross-site scripting, and exposed secrets, leading to data breaches, unauthorized access, and financial loss. This Skill eliminates these risks by providing actionable, production-ready security guidance integrated directly into your development workflow.

Core Features & Use Cases

  • OWASP Top 10 Prevention: Step-by-step code examples and rules to block the most common web application attack vectors.
  • Input Validation & Sanitization: Patterns for validating all user input at system boundaries and sanitizing output to prevent injection and XSS attacks.
  • Secrets & Dependency Management: Rules for safe secrets handling, npm audit triage, and security header configuration to reduce exposure risk.
  • Use Case: When building a new user authentication feature, this Skill ensures you implement proper password hashing, secure session cookies, rate limiting on login endpoints, and input validation to prevent credential theft and brute force attacks.

Quick Start

Use the security-and-hardening skill to review the new payment processing endpoint for OWASP compliance and implement all required security controls before deployment.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent OWASP Top 10 vulnerabilities in my web application?▼

To prevent OWASP Top 10 vulnerabilities, implement input validation at system boundaries, use parameterized queries, enforce secure session management, and apply proper secrets handling to block injection attacks, broken authentication, and sensitive data exposure.

How do I sanitize user input to prevent XSS and injection attacks?▼

To sanitize user input and prevent XSS and injection attacks, apply validation patterns at system boundaries and sanitize all output data to ensure malicious code cannot be executed by the browser or database interpreter.

What is the best way to manage secrets and handle dependencies securely?▼

The best way to manage secrets securely is to follow strict rules for safe secrets handling, perform regular npm audit triage for dependency vulnerabilities, and configure security headers to minimize overall exposure risk.

Does this security guidance work for implementing new user authentication features?▼

Yes, this security guidance works for authentication features by ensuring you implement proper password hashing, secure session cookies, rate limiting on login endpoints, and input validation to prevent credential theft and brute force attacks.

When do I need to configure security headers for my web application?▼

You need to configure security headers when preparing any endpoint handling user input, authentication, or sensitive data transmission, ensuring compliance with OWASP standards before deployment to reduce exposure risk from common web attacks.

Related Skills

Explore More Software Engineering Skills→
HsienWHsienW
63

security-and-hardening

Identify security risks and suggest hardening practices for web application code.

Community
Advanced
skyasu2skyasu2
2

security-audit-workflow

Automate pre-deployment security audits for Next.js/Supabase CI pipelines.

Community
Advanced
TeiNamTeiNam
12

laravel-verification

Automate Laravel project verification for CI/CD pipelines.

Community
Advanced
Prohao42Prohao42
120

waf-bypass-techniques

Identify WAF products and apply bypass techniques for penetration testing.

Community
Advanced