skills.rest
tgmarinho
tgmarinhoCOMMUNITY
Explore all skills by this author →
Website𝕏@tgmarinhoGitHub

security-and-hardening

Harden web applications against OWASP Top 10 vulnerabilities.

Updated Jul 2, 2026
Search Tags:#security#secure coding#web application#vulnerability prevention#hardening
One-click install
npx skills add https://github.com/tgmarinho/agent-super-powers-matt-pocock-skills-comparasions --skill security-and-hardening-tgmarinho
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-and-hardening
Source: https://github.com/tgmarinho/agent-super-powers-matt-pocock-skills-comparasions/tree/main/upstream-snapshots/agent-skills/skills/security-and-hardening
Command: npx skills add https://github.com/tgmarinho/agent-super-powers-matt-pocock-skills-comparasions --skill security-and-hardening-tgmarinho

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the critical need for robust security in web applications, ensuring that every piece of code is safeguarded against potential vulnerabilities.

Core Features & Use Cases

  • Security-First Development: Implements best practices for secure coding, treating all external inputs as hostile and all secrets as sacred.
  • Threat Modeling: Encourages a proactive approach to security by identifying trust boundaries and potential threats.
  • OWASP Top 10 Prevention: Provides guidance on preventing common web application vulnerabilities as outlined by the OWASP Top 10.
  • Input Validation: Offers patterns for validating user input to prevent SQL injection, XSS, and other common attacks.
  • Rate Limiting and Secrets Management: Ensures that your application is resilient against brute force attacks and that sensitive information is kept secure.

Quick Start

Run the security-and-hardening skill to harden your application against common security threats.

Frequently Asked Questions about security-and-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS vulnerabilities in web applications?▼

Prevent SQL injection and XSS by applying strict input validation patterns that treat all external inputs as hostile. This approach ensures malicious data is sanitized before processing, neutralizing common web application attacks.

What is threat modeling and when do I need it for secure coding?▼

Threat modeling is a proactive security approach that identifies trust boundaries and potential threats in your application. You need it when handling user data, authentication, or external integrations to safeguard against vulnerabilities.

How do I implement OWASP Top 10 prevention measures for user authentication?▼

Implement OWASP Top 10 prevention by applying secure coding practices, rate limiting against brute force attacks, and strict secrets management. This secures user authentication flows and protects sensitive information from exposure.

Does this security hardening approach work for applications with external integrations?▼

Yes, security hardening works for applications with external integrations by treating all external inputs as hostile and enforcing trust boundaries. It requires knowledge of security best practices to safeguard data exchanged across external services.

What's the best way to manage secrets and prevent brute force attacks in web applications?▼

The best way to manage secrets and prevent brute force attacks is combining strict secrets management with rate limiting. This keeps sensitive information secure while ensuring application resilience against automated credential guessing.

Related Skills

Explore More Software Engineering Skills→
YSheldonYSheldon

threat_modeling

Generate a formal threat_model.md by enumerating assets, trust boundaries, and STRIDE categories.

Community
Advanced
0xMerl990xMerl99
1

security-audit

Audit code against OWASP Top 10 and assess CVE impacts.

Community
Advanced
amanhsnamanhsn

senior-secops

Automate application security operations with Python scripts for vulnerability scanning and compliance verification.

Community
Advanced
SafeAgent-BeihangSafeAgent-Beihang
50

clawguard-threat-detect

Detect and mitigate runtime threats in OpenClaw environments via real-time behavioral monitoring.

Official
Advanced