security-and-hardening - Harden web applications against common security threats
Applies threat modeling and security practices to protect user input, authentication, sensitive data, and external integrations.
Tags
Updated: 2026-10-04Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Map trust boundaries
- Identify protected assets
- Analyze threats with STRIDE
- Validate external input
- Parameterize database queries
- Encode output against XSS
- Harden authentication and sessions
- Enforce authorization checks
- Secure external requests
- Review dependency vulnerabilities
Inputs
- Application code
- User input flows
- Authentication flows
- Data storage flows
- External service integrations
- File upload handlers
- Webhook handlers
Outputs
- Hardened application code
- Security configuration changes
- Abuse cases
- Security audit findings