skills.rest
pyoclaw
pyoclawCOMMUNITY
Explore all skills by this author →
GitHub

security-and-hardening

Enforce validation, authentication, and secure configuration for web applications.

Updated Aug 23, 2026
Search Tags:#security#authentication#owasp#input-validation#rate-limiting#hardening#secrets-management
One-click install
npx skills add https://github.com/pyoclaw/agent-skills --skill security-and-hardening-pyoclaw
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/pyoclaw/agent-skills/tree/main/skills/security-and-hardening
Command: npx skills add https://github.com/pyoclaw/agent-skills --skill security-and-hardening-pyoclaw

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides a security-first checklist and actionable guidance to prevent common web application vulnerabilities, reduce attack surface, and enforce safe handling of user input, authentication, and secrets across a codebase.

Core Features & Use Cases

  • Boundary validation and input sanitization: Validate and sanitize all external inputs at API and form boundaries.
  • Authentication & authorization hardening: Use secure password hashing, httpOnly/secure cookies, session protections, and explicit authorization checks.
  • Configuration and dependency safety: Enforce HTTPS, security headers, CORS restrictions, rate limiting, secrets management, and dependency auditing procedures.
  • Use Case: During a release, run the checklist to find unsafe database queries, missing security headers, exposed secrets, and vulnerable dependencies, then produce prioritized remediation steps.

Quick Start

Use the security-and-hardening skill to review the codebase for input validation, authentication flaws, exposed secrets, and configuration issues, and return prioritized remediation actions.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden web application authentication and session management?▼

Harden authentication by enforcing strong password hashing, httpOnly and secure cookies, explicit authorization checks, and session protections to prevent unauthorized access to user accounts and data.

What is the best way to prevent vulnerabilities in API endpoints and web services?▼

Prevent vulnerabilities in API endpoints by validating and sanitizing external inputs at boundaries, enforcing rate limiting, applying parameterized queries, and configuring strict CORS restrictions during development.

How do I secure application configuration and manage exposed secrets?▼

Secure configuration by enforcing HTTPS, setting security headers, implementing secrets management procedures, and running dependency audits to identify and remediate vulnerable third-party integrations before release.

Can I use a security checklist to find unsafe database queries and missing security headers?▼

Yes, you can run a security checklist to scan codebases for unsafe database queries, missing security headers, exposed secrets, and input validation flaws, returning prioritized remediation steps for each issue.

Does input validation and boundary sanitization work for file uploads and third-party integrations?▼

Input validation and boundary sanitization apply to file uploads and third-party integrations by validating and sanitizing all external inputs at API and form boundaries to reduce the overall application attack surface.

Related Skills

Explore More Software Engineering Skills→
augustsclaugustscl
2

security-auditor

Identify and remediate security vulnerabilities in application code and configurations.

Community
Advanced
foutoucourfoutoucour

security

Orchestrate security assessments across code, infrastructure, auth, secrets, and pentest.

Community
Advanced
joshuakesselljoshuakessell

security

Enforce OWASP security patterns and automated security testing in CI/CD pipelines.

Community
Advanced
simotasimota
68

Probe

Perform dynamic security testing with OWASP ZAP and Burp Suite.

Community
Advanced