skills.rest
Mybono
MybonoCOMMUNITY
Explore all skills by this author →
GitHub

security-hardening

Review and apply security best practices for application hardening.

100|18|Updated Apr 3, 2026
Search Tags:#security#input validation#rate limiting#CSP#secrets management#SQL injection#JWT#hardening#CSRF#dependency auditing
One-click install
npx skills add https://github.com/Mybono/ai-orchestrator --skill security-hardening-mybono
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-hardening
Source: https://github.com/Mybono/ai-orchestrator/tree/main/skills/security-hardening
Command: npx skills add https://github.com/Mybono/ai-orchestrator --skill security-hardening-mybono

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a robust set of guidelines and best practices to harden the security of your application, addressing common vulnerabilities and ensuring compliance with security standards.

Core Features & Use Cases

  • Input Validation: Implement strict input validation to prevent common injection attacks.
  • Output Encoding: Safeguard against XSS by properly encoding output based on context.
  • SQL Injection Prevention: Utilize parameterized queries to prevent SQL injection attacks.
  • CSRF Protection: Implement CSRF tokens to protect against cross-site request forgery.
  • Content Security Policy: Configure Content Security Policy headers to mitigate cross-site scripting attacks.
  • Security Headers: Set HTTP security headers to enhance security.
  • Rate Limiting: Apply rate limiting to protect against brute force attacks.
  • JWT Best Practices: Follow best practices for JWT usage to enhance security.
  • Secrets Management: Safely manage secrets to prevent data breaches.
  • Dependency Auditing: Regularly audit dependencies to identify and mitigate vulnerabilities.
  • Checklist Before Deploy: Ensure all security measures are in place before deploying your application.

Quick Start

Run the security-hardening skill to review and apply security best practices to your application.

Frequently Asked Questions about security-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS in my web application?▼

To prevent SQL injection and XSS, implement strict input validation, utilize parameterized queries, and apply proper output encoding based on context. These measures safeguard against common injection attacks and cross-site scripting vulnerabilities.

What security headers and Content Security Policy configurations should I set before deployment?▼

Before deployment, configure HTTP security headers and implement Content Security Policy headers to mitigate cross-site scripting attacks. A comprehensive pre-deployment checklist ensures all necessary security measures are properly in place.

How does rate limiting and JWT usage protect against brute force attacks?▼

Rate limiting protects against brute force attacks by restricting request frequencies, while following JWT best practices enhances token security. Applying both measures strengthens your application's authentication and authorization layers.

Can I use this security hardening approach for managing secrets and auditing dependencies?▼

Yes, this security hardening approach safely manages secrets to prevent data breaches and regularly audits dependencies to identify vulnerabilities. It provides comprehensive guidelines to address common application security weaknesses.

What is the best way to implement CSRF protection and input validation?▼

The best way to implement CSRF protection and input validation is to apply CSRF tokens for cross-site request forgery defense and enforce strict input validation rules. This combination prevents common injection attacks effectively.

Related Skills

Explore More Software Engineering Skills→
alslimanyalslimany

spatie-security

Apply Spatie security guidelines to application, database, and server configurations.

Community
Intermediate
rbkayzrbkayz

wshobson Security Hardening Workflow

Orchestrate a multi-agent workflow for security hardening and compliance verification.

Community
Advanced
KylerDKylerD
14

Security Patterns

Guide web application security with secrets management, authentication, input validation, and dependency auditing.

Community
Intermediate
summarybotngsummarybotng
2

security-testing

Scan code, dependencies, and configurations for OWASP Top 10 vulnerabilities.

Official
Advanced