skills.rest
achyutkneupane
achyutkneupaneCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

spatie-security

Applies Spatie security guidelines to application, database, and server configuration reviews.

Updated Nov 29, 2025
Search Tags:#code review#security#spatie#credential management#ssl#server hardening#csrf
One-click install
npx skills add https://github.com/achyutkneupane/Blog-Kit --skill spatie-security-achyutkneupane
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: spatie-security
Source: https://github.com/achyutkneupane/Blog-Kit/tree/main/.ai/skills/spatie-security
Command: npx skills add https://github.com/achyutkneupane/Blog-Kit --skill spatie-security-achyutkneupane

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Teams often overlook baseline security practices when configuring applications, databases, and servers, leaving systems exposed to preventable vulnerabilities. This Skill provides a structured checklist of Spatie's security guidelines to apply during configuration and code review. ## Core Features & Use Cases - Application Security Review: Enforces SSL for HTTP traffic, CSRF tokens in forms, proper HTTP methods for state-changing actions, and automated authorization tests. - Database & Server Hardening: Covers password hashing, API key encryption, per-database users with restricted permissions, SSH key authentication, firewalls, and unattended upgrades. - Credential Management: Promotes password managers, unique passwords, two-factor authentication, and protected private keys. - Use Case: When reviewing a Laravel deployment, use this Skill to verify SSL is enforced, database access is restricted to whitelisted hosts, and the firewall only permits ports 22 and 443. ## Quick Start Review my server and application configuration against Spatie's security guidelines and list any violations.

Frequently Asked Questions about spatie-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure a Laravel application following Spatie guidelines?▼

Spatie guidelines require SSL for all HTTP traffic, CSRF tokens in every form, and non-GET HTTP methods for significant actions. Add automated authorization tests to confirm restricted functionality is only accessible to authorized users.

What database security practices does Spatie recommend?▼

Spatie recommends hashing all stored passwords, encrypting API keys in databases, and using separate database users per database with appropriate permissions. Database access should be restricted to whitelisted hosts such as the webserver and developer machines.

How should I harden an Ubuntu server for web hosting?▼

Keep NGINX, PHP, and Ubuntu updated, use SSH with private key authentication while disabling password logins, and enable unattended-upgrades. Configure the firewall to permit only necessary traffic, typically ports 22 and 443.

Does this Skill cover code style or business logic review?▼

No, code style, business logic, and UI/UX design are explicitly out of scope. The Skill focuses only on application security, database security, server configuration, and credential management.

What credential management practices should developers follow?▼

Store all passwords in a password manager like 1Password, ensure every password is unique, and enable two-factor authentication where available. All private keys should be protected with passwords.

Related Skills

Explore More Software Engineering Skills→
relaticlerelaticle
1.5k

spatie-security

Apply Spatie security guidelines to harden applications, databases, and servers.

Official
Intermediate
toplyr-narfurtoplyr-narfur

network-security-advanced

Harden VPS security for Urbit deployments with SSH, firewall, and intrusion detection.

Community
Advanced
jeremylongshorejeremylongshore
2.6k

scanning-for-vulnerabilities

Scan codebases, dependencies, and configurations for security vulnerabilities and CVEs.

Community
Intermediate
wizelinewizeline

devsec-managing-compliance-frameworks

Map security controls to compliance frameworks and generate audit evidence.

Official
Advanced