Review web application security posture across frontend, API, and server boundaries.
npx skills add https://github.com/Fenntasy/dotfiles --skill web-security-fenntasy
Please help me install this Agent Skill. Skill: web-security Source: https://github.com/Fenntasy/dotfiles/tree/main/claude/skills/web-security Command: npx skills add https://github.com/Fenntasy/dotfiles --skill web-security-fenntasy
Cross-cutting browser-facing security guidance for production web applications, covering threats like CSRF, XSS, CSP, cookie security, CORS, session management, authentication, JWT, OAuth 2.1, SSRF, security headers, input validation, and supply chain security.
Review the current security posture of the web app and apply recommended controls for CSRF, XSS, CSP, cookies, and CORS.
High-intent search queries and answers about installing and using this skill.
To secure cookies and configure CSP against XSS and CSRF, review your web app's security posture and apply recommended controls aligned with OWASP cheat sheets across frontend and API boundaries for production hardening.
Implementing OAuth 2.1 and JWT for session management requires applying cross-cutting authentication guidance aligned with RFC references, covering token validation and session handling across server and API boundaries.
Configuring CORS and security headers for production web API endpoints involves hardening browser-facing boundaries by applying recommended security controls and validating inputs to mitigate cross-origin and server-side risks.
Yes, this web security guidance covers SSRF and supply chain vulnerabilities alongside input validation, providing broad threat guidance aligned with OWASP references for reviewing endpoint security posture in production applications.
You need to review security headers and input validation when implementing authentication, evaluating a new endpoint's security posture, or hardening cross-cutting web application boundaries against threats like XSS and SSRF.
asfbay-bitPerform STRIDE threat modeling and OWASP Top 10 compliance mapping for application security.
AgentSecOpsRun Semgrep SAST scans to detect security flaws and map findings to OWASP and CWE standards.
roanbrasilConfigure API gateways with authentication, rate limiting, and routing.
hffmnnjAudit code for security vulnerabilities and generate a structured security report.
