Audit repositories for exploitable security risks and prioritize fixes.
npx skills add https://github.com/swyxio/skills --skill security-hardening-swyxio
Please help me install this Agent Skill. Skill: security-hardening Source: https://github.com/swyxio/skills/tree/main/security-hardening Command: npx skills add https://github.com/swyxio/skills --skill security-hardening-swyxio
Manual security audits often miss critical exploitable vulnerabilities or waste time on low-priority theoretical issues, leaving production software at risk without clear remediation steps. This Skill delivers a structured, pragmatic approach to application security hardening that focuses on real-world risks and actionable fixes.
Use the security-hardening skill to audit this repository for exploitable application security risks, prioritize critical fixes, and document any remaining residual risk.
High-intent search queries and answers about installing and using this skill.
To audit for application security risks before launch, map your attack surface, prioritize exploitable vulnerabilities like auth bypasses and SSRF, and document residual risk with targeted fix plans.
Risk-prioritized remediation separates must-fix pre-release vulnerabilities from deferred accepted risks, ensuring security hardening focuses on real-world exploitable threats rather than theoretical compliance checks.
Check for secret leakage and vulnerable dependencies by running dependency CVE audits, identifying secret storage entrypoints, and adding targeted security tests to catch validation failures.
Yes, you can fix CORS and CSRF misconfigurations while preserving core product behavior, unless a specific remediation explicitly requires a necessary change to the application's functional logic.
The best way to document residual security risk is to provide a clear report detailing severity levels, recommended next steps, and justifications for accepted risks following a vulnerability audit.
Do not rely solely on automated vulnerability audits when theoretical compliance checks fail to capture real-world risks; manual pragmatic hardening is needed to catch bypass and failure cases.
weirdgmeGenerate Node.js/Express/TypeScript microservice backend guidelines with layered architecture.
williamzujkowskiMap systems to NIST controls and generate implementation plans.
cathayriskProvide a security review checklist for Python code handling secrets, authentication, file I/O, network requests, and user input.
kivo360Mitigate security vulnerabilities in CI/CD pipelines using OWASP Top 10 and SAST/DAST workflows.
