skills.rest
human-centric-engineering
human-centric-engineeringOFFICIAL
Explore all skills by this author →
WebsiteGitHub

security-hardener

Implement OWASP-aligned security features like rate limiting, CORS, CSP, and input sanitization.

3|Updated Dec 12, 2025
Search Tags:#OWASP#security#rate limiting#CSP#CORS#hardening
One-click install
npx skills add https://github.com/human-centric-engineering/sunrise --skill security-hardener-human-centric-engineering
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-hardener
Source: https://github.com/human-centric-engineering/sunrise/tree/main/.claude/skills/security-hardener
Command: npx skills add https://github.com/human-centric-engineering/sunrise --skill security-hardener-human-centric-engineering

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and scripts (resource) components.

What problem does it solve?

This Skill addresses critical security vulnerabilities by implementing robust measures like rate limiting, Content Security Policy (CSP), and Cross-Origin Resource Sharing (CORS) configurations, ensuring your application is protected against common web attacks.

Core Features & Use Cases

  • Rate Limiting: Protects against brute-force and DoS attacks by controlling request frequency.
  • CSP Implementation: Mitigates XSS and injection attacks by defining trusted content sources.
  • CORS Configuration: Manages cross-origin requests securely.
  • Input Sanitization: Prevents injection attacks by cleaning user inputs.
  • Use Case: You've just deployed a new API endpoint and want to ensure it's protected from abuse. Use this Skill to add rate limiting and secure headers, preventing unauthorized access and potential exploits.

Quick Start

Apply security hardening to the '/api/users' endpoint, including rate limiting and CSP.

Frequently Asked Questions about security-hardener

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement OWASP-aligned security headers and rate limiting for my API?▼

OWASP-aligned security hardening applies rate limiting, CSP, and CORS configurations to web applications, protecting APIs against brute-force and DoS attacks through environment-aware settings for development and production.

What's the best way to configure CORS and Content Security Policy to prevent XSS attacks?▼

Configuring CORS and CSP prevents XSS and injection attacks by defining trusted cross-origin request sources and content sources, ensuring your application only processes verified external inputs.

Does this security hardening approach support separate configurations for development and production environments?▼

Security hardening focuses on environment-aware configurations, ensuring your application maintains distinct security settings for development and production environments to balance testing flexibility and production resilience.

How do I add input sanitization to protect web application endpoints from injection attacks?▼

Input sanitization prevents injection attacks by cleaning user inputs before processing, mitigating unauthorized access and potential exploits when you deploy new API endpoints requiring protection from abuse.

Related Skills

Explore More Software Engineering Skills→
zerAdazerAda

ingress_hardening

Manage Traefik and Nginx ingress configurations with TLS, rate limiting, and security headers.

Community
Intermediate
SkobynSkobyn

hunt-brute-force

Detect login brute force, OTP/2FA brute force, and credential stuffing vulnerabilities.

Community
Advanced
Arnutt-NArnutt-N

security-scanner

Detect OWASP Top 10 risks and misconfigurations in HR-IMS code.

Community
Advanced
pascallammerspascallammers
1

security-patterns

Implement OWASP Top 10 security patterns with bcrypt, JWT, and helmet.

Community
Advanced