security-defensive

What problem does it solve?

This Skill helps teams embed security into the software lifecycle, reducing the risk of insecure code, misconfigurations, and weak authentication by codifying robust defensive rules and practices.

Core Features & Use Cases

• Comprehensive security guidelines: Covers input validation, authentication, authorization, CSRF, rate limiting, secrets management, and secure logging aligned with OWASP Top 10.
• Pre-deployment hardening: Provides a structured checklist and patterns to harden apps before release, including secure cookie usage, CSP, and strict CORS policies.
• Threat modeling and reviews: Enables systematic review of server and client code, APIs, and infrastructure to surface prototype pollution, RCE, SSRF, IDOR, and data leakage risks.
• Use Case: A security engineer uses this Skill to perform an in-depth security review of a REST API, identifies a missing CSRF token in state-changing endpoints, and prescribes fixes.

Quick Start

Analyze a codebase to identify security gaps, prioritize remediation, and generate a concrete improvement plan.