security-and-hardening - Harden applications against common security vulnerabilities
Applies threat modeling and security controls for untrusted input, authentication, sensitive data, and external integrations.
Tags
Updated: 2026-10-08Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Map trust boundaries
- Identify protected assets
- Apply STRIDE analysis
- Validate external input
- Parameterize database queries
- Encode rendered output
- Harden session cookies
- Set security headers
- Audit dependencies
- Review authorization checks
- Prevent secret exposure
- Assess SSRF risks
Inputs
- Application source code
- Dependency lockfile
- External integration configuration
- User input handling code
- Authentication and authorization logic
- Shared security constraints
- Security checklist
Outputs
- Hardened application code
- Security audit results
- Threat model findings
- Validation and authorization controls
- Security configuration changes
Requirements
- Access to the application codebase
- CG Spain container
- Permission to run security commands
- Access to shared constraint files