skills.rest
KevinKE93
KevinKE93COMMUNITY
Explore all skills by this author →
Website𝕏@keji_laoke_aiGitHub

security-and-hardening

Harden application code with input validation, secure authentication, and output encoding.

42|3|Updated May 8, 2026
Search Tags:#authorization#security#authentication#input validation#xss#owasp#hardening
One-click install
npx skills add https://github.com/KevinKE93/Dev_Agent_OPC --skill security-and-hardening-kevinke93
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/KevinKE93/Dev_Agent_OPC/tree/main/dev-agent/skills/security-and-hardening
Command: npx skills add https://github.com/KevinKE93/Dev_Agent_OPC --skill security-and-hardening-kevinke93

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

This Skill prevents security bugs by enforcing safe input handling, authorization, secrets management, and vulnerability hygiene throughout development.

Core Features & Use Cases

  • Input validation at trust boundaries: Apply strict schema validation to request bodies, query params, and uploaded files to stop injection and malformed-data attacks.
  • Secure authentication & authorization: Ensure passwords are hashed, sessions are protected with secure cookie settings, and every protected endpoint performs ownership/role checks.
  • Harden web output and integrations: Prevent XSS and sensitive data exposure while configuring security headers, HTTPS, CORS restrictions, and dependency auditing.

Use Case: You are building a web feature that accepts user input and calls third-party APIs; use this Skill to validate data, lock down authZ, mitigate OWASP Top 10 risks, and verify results via npm audit and checklist items.

Quick Start

Use the security-and-hardening Skill when implementing a new endpoint that processes user input, stores data, or integrates with an external service.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent XSS and injection attacks when processing untrusted user input in web applications?▼

Prevent XSS and injection by enforcing strict schema validation at trust boundaries for request bodies and query parameters, alongside safe output encoding across web and API surfaces to harden application code.

What is the best way to implement secure authentication and authorization for protected endpoints?▼

Secure authentication and authorization require hashing passwords, protecting sessions with secure cookie settings, and ensuring every protected endpoint performs explicit ownership and role checks before granting access.

How do I configure security headers and CORS restrictions for third-party API integrations?▼

Configure security headers and CORS restrictions by enforcing HTTPS, setting secure cookies, and limiting cross-origin access to prevent sensitive data exposure when integrating with external third-party services.

Can I use this approach to audit dependencies and manage secrets for my application?▼

Yes, you can use this hardening approach to perform dependency vulnerability auditing via tools like npm audit, and enforce proper secrets management to satisfy security constraints across your application.

When do I need parameterized database queries and anti-XSS rendering practices?▼

You need parameterized database queries and anti-XSS rendering practices during feature development involving untrusted user input, file uploads, and data storage to stop injection and malformed-data attacks.

Related Skills

Explore More Software Engineering Skills→
pohlai88pohlai88

zod

Define TypeScript schemas to validate untrusted data with runtime checks.

Community
Advanced
0xRayAI0xRayAI

security-scan

Scan software projects for security vulnerabilities and generate risk reports.

Official
Intermediate
mitul-bhatiamitul-bhatia

perl-security

Harden Perl applications with taint mode, input validation, and parameterized DBI queries.

Community
Advanced
AcczdyAcczdy
2

implementing-runtime-application-self-protection

Deploy RASP agents to detect and block in-app attacks in Java and Python web applications.

Community
Advanced