security-and-hardening - Harden web applications against security vulnerabilities
Applies threat modeling and security controls to protect user input, authentication, sensitive data, and external integrations.
Tags
Updated: 2026-10-04Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Map trust boundaries
- Identify valuable assets
- Apply STRIDE analysis
- Write abuse cases
- Validate external input
- Parameterize database queries
- Encode rendered output
- Secure session cookies
- Configure security headers
- Hash passwords securely
- Restrict external requests
- Audit dependencies
Inputs
- Application code
- User input flows
- Authentication configuration
- Session configuration
- Sensitive data flows
- External service integrations
- File upload handlers
- Webhook endpoints
- Dependency audit results
Outputs
- Hardened application code
- Threat model findings
- Security validation rules
- Security configuration changes
- Dependency audit results