Review web app authentication, authorization, and OWASP Top 10 risks.
npx skills add https://github.com/korwlik23/skills --skill security-hardening-korwlik23
Please help me install this Agent Skill. Skill: security-hardening Source: https://github.com/korwlik23/skills/tree/main/v1/security-hardening Command: npx skills add https://github.com/korwlik23/skills --skill security-hardening-korwlik23
This skill helps you identify security weaknesses and prevent production incidents by systematically reviewing authentication, authorization, input handling, secrets management, headers, and common OWASP Top 10 risks.
Use the security-hardening skill to review the codebase and configs for authentication, authorization, injection, file uploads, headers, and secrets handling, then output an evidence-based security review with prioritized fixes and verification steps.
High-intent search queries and answers about installing and using this skill.
An evidence-based security review systematically evaluates authentication, authorization, OWASP Top 10 risks, and secure configuration, tying findings to exploitability and validating them with remediation verification steps and tests.
Harden endpoints by applying framework-tailored checklists for Laravel, Next.js/Node.js, and Svelte/SvelteKit that assess IDOR, session fixation, injection, and business-logic abuse using a penetration-testing-style review.
Configure secure cookies, CORS, and CSRF protection by applying concrete production hardening baselines that enforce strict security headers, rate limiting, and least-privilege authorization across endpoints and APIs.
Yes, this security review approach works for secure file uploads and API sessions by evaluating upload controls and session management alongside authentication and authorization risks without executing real exploits.
Avoid unverified vulnerability claims because an effective security assessment requires an evidence-first mindset, ensuring findings map to actual exploitability and impact while enforcing strict non-disclosure of secrets or PII.
To validate security fixes and prevent production incidents, you need acceptance gates that require findings to be tied to impact, prioritized remediation steps, and verifiable tests confirming the vulnerabilities are resolved.
Q16GAudit authentication and authorization flows for login, session, and ownership controls.
peopleforresterConfigure Spring Boot 3.x security with Spring Security 6.x.
devendrapratapsinghScan application code for vulnerabilities and hardcoded secrets.
dreadnodeFilter low-quality and false positive vulnerability findings from scanners and agent output.
