security-operations-deployment

Security middleware selection depends on endpoint type and function. Rate limiting protects against abuse on public APIs; CSRF protection secures state-changing operations. This Skill provides decision rules for when to apply each middleware based on your endpoint's role, ensuring appropriate protection without over-constraining performance.

Secure deployment requires environment-specific variables for secrets management, credential rotation, and validation across development, staging, and production. This Skill guides you through configuring these variables with best practices for each environment, preventing accidental exposure and ensuring proper secret isolation.

Pre-deployment security verification catches configuration gaps before production. This Skill provides an automated checklist covering middleware setup, environment variable validation, and security configurations, so you can deploy with confidence that critical security controls are in place.

Environment-specific security differs significantly: development may skip CSRF checks for convenience, while production requires full enforcement. This Skill handles environment-specific middleware and variable configuration, allowing tailored security posture for each deployment stage.

Secrets require rotation, validation, and environment isolation to prevent leaks. This Skill covers environment variable management practices including secret storage, rotation schedules, and validation logic, helping you maintain security without hardcoding credentials or exposing sensitive data.