skills.rest
ProfPowell
ProfPowellCOMMUNITY
Explore all skills by this author →
GitHub

security

Implement security headers, CSP, and input validation for web applications.

4|Updated Jan 13, 2026
Search Tags:#security#web development#secure coding#csp#http headers#xss prevention#csrf protection
One-click install
npx skills add https://github.com/ProfPowell/vanilla-breeze --skill security-profpowell
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/ProfPowell/vanilla-breeze/tree/main/.claude/skills/security
Command: npx skills add https://github.com/ProfPowell/vanilla-breeze --skill security-profpowell

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers create secure web pages and applications by preventing common vulnerabilities like injection attacks, data exposure, and insecure configurations.

Core Features & Use Cases

  • Security Headers: Implement essential HTTP headers (CSP, HSTS, X-Frame-Options) to protect against various attacks.
  • Content Security Policy (CSP): Define granular policies to control resource loading and mitigate XSS.
  • Input Validation & Output Encoding: Ensure data is validated on the server and safely encoded before output.
  • Use Case: You are building a new user authentication system and need to ensure all forms are protected against CSRF, user input is validated server-side, and sensitive data is handled securely with appropriate headers and encoding.

Quick Start

Implement a basic Content Security Policy by adding the provided meta tag to your HTML head.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement Content Security Policy to prevent XSS attacks?▼

Prevent cross-site scripting (XSS) using CSP by defining granular policies that control resource loading. Adding the provided meta tag to your HTML head establishes strict rules for allowed content sources.

What HTTP security headers do I need for secure web development?▼

Essential HTTP security headers include Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and X-Frame-Options. Implementing these headers protects web applications against injection attacks, protocol downgrades, and clickjacking.

How do I protect web forms from CSRF vulnerabilities?▼

Protect web forms from CSRF vulnerabilities by implementing CSRF protection tokens alongside strict server-side input validation. This ensures submitted data is authenticated and safely encoded before output to prevent unauthorized submissions.

Does this cover the OWASP Top 10 for web application security?▼

Yes, it covers OWASP Top 10 awareness by providing best practices for HTTPS implementation, security headers, sensitive data handling, and error handling to prevent common web application vulnerabilities like injection attacks and data exposure.

What is the best way to handle sensitive data and secure cookies?▼

Handle sensitive data and secure cookies by implementing proper cookie security attributes, secure link attributes, and output encoding. This prevents data exposure and ensures secure session management across web applications.

How do I add Subresource Integrity (SRI) for external scripts?▼

Add Subresource Integrity (SRI) by including specific integrity attributes in your script tags. This ensures external resources have not been tampered with, mitigating the risk of loading compromised scripts and preventing execution of malicious code.

Related Skills

Explore More Software Engineering Skills→
AnanyaBanerjeeAnanyaBanerjee

security

Secure static HTML pages with Cloudflare headers, SRI, and security audits.

Community
Advanced
blazefluzblazefluz

Security Engineer

Audit security, test penetration, and check compliance for the Rentable application.

Community
Advanced
Cyberworld-buildersCyberworld-builders

nextjs-client-cookie-pattern

Set server-side cookies from Next.js client components via server actions.

Official
Intermediate
ntaksh42ntaksh42
1

security-audit

Detect OWASP Top 10 vulnerabilities, insecure dependencies, and security misconfigurations.

Community
Advanced