security-and-hardening - Apply security-first hardening to web applications
Harden web application code and configurations against vulnerabilities involving untrusted input, authentication, data storage, and external integrations.
Tags
Updated: 2026-10-07Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Model trust boundaries
- Identify security assets
- Apply STRIDE analysis
- Validate external input
- Parameterize database queries
- Encode rendered output
- Harden authentication sessions
- Enforce authorization checks
- Configure security headers
- Restrict external requests
- Audit committed dependencies
Inputs
- Application source code
- Authentication flows
- External integration configuration
- Dependency lockfile
- File upload handlers
Outputs
- Hardened application code
- Security configuration changes
- Dependency audit results