security-and-hardening

Automate security design checks for trust boundaries, access controls, and auditability.

6|Updated Mar 30, 2026
One-click install
npx skills add https://github.com/moberghr/mtk-agent-toolkit --skill security-and-hardening-moberghr
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/moberghr/mtk-agent-toolkit/tree/main/.claude/skills/security-and-hardening
Command: npx skills add https://github.com/moberghr/mtk-agent-toolkit --skill security-and-hardening-moberghr

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security and compliance considerations must be designed in at the problem definition stage, not tacked on during later reviews, especially when changes touch authentication, secrets, audited state, audit trails, infrastructure, or external inputs.

Core Features & Use Cases

  • Identify and enforce trust boundaries (user input, external services, privileged operations) across changes.
  • Validate auth/authorization requirements, audit trail needs, and secure handling of secrets and configuration data.
  • Promote least-privilege principles and auditable changes to infrastructure and code to prevent data leakage or misconfiguration.

Quick Start

Evaluate the incoming change against trust boundaries, authentication requirements, and audit trails to ensure security is designed in from the start.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce trust boundaries and least-privilege during code changes?

To enforce trust boundaries and least-privilege, automate security design checks during code changes to validate user input, external services, and privileged operations. This ensures access controls and traceability are applied across auth and infrastructure updates.

What is security hardening at design time for infrastructure updates?

Security hardening at design time involves evaluating incoming changes against authentication requirements and audit trails before implementation. It ensures secure handling of secrets and prevents data leakage or misconfiguration in infrastructure updates.

How do I validate auth and authorization requirements for external input handling?

Validate auth and authorization requirements by automating security checks that enforce trust boundaries for external input handling. This guarantees least-privilege principles and auditable state transitions are applied to all authentication changes.

Does automating audit requirements prevent data leakage in audited state transitions?

Automating audit requirements prevents data leakage by enforcing traceability and secure configuration during audited state transitions. It validates access controls and trust boundaries to ensure compliance throughout the code change process.

Can I use automated security checks for secrets management and configuration data?

You can use automated security checks to validate secure handling of secrets and configuration data. The checks enforce least-privilege and auditability, ensuring sensitive information is protected during infrastructure and code modifications.

What is the best way to ensure compliance and auditability for auth changes?

The best way to ensure compliance for auth changes is to automate security design checks that validate authorization and enforce audit trails. This integrates traceability and least-privilege directly into the problem definition stage.