security-and-hardening - Harden web applications against common vulnerabilities
Provides security-first practices for handling untrusted input, authentication, sensitive data, and external integrations.
Tags
Updated: 2026-10-04Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Map trust boundaries
- Identify protected assets
- Analyze threats with STRIDE
- Write abuse cases
- Validate external input
- Parameterize database queries
- Encode rendered output
- Secure authentication sessions
- Configure security headers
- Review dependency vulnerabilities
Inputs
- Application codebase
- Feature requirements
- External input flows
- Authentication configuration
- Data storage configuration
- Integration configuration
- Dependency manifests
Outputs
- Threat model
- Abuse cases
- Security findings
- Hardened code and configuration