security-and-hardening - Harden Web Applications Against Common Vulnerabilities
Applies security-first practices to protect web applications handling untrusted input, authentication, sensitive data, and external integrations.
Tags
Updated: 2026-10-07Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Map trust boundaries
- Identify valuable assets
- Run STRIDE analysis
- Write abuse cases
- Validate external input
- Parameterize database queries
- Encode rendered output
- Enforce HTTPS communication
- Hash stored passwords
- Set security headers
- Secure session cookies
- Audit dependency lockfiles
Inputs
- Application source code
- Feature requirements
- External input flows
- Dependency lockfile
Outputs
- Hardened application code
- Security configuration changes
- Threat models
- Abuse cases
- Security recommendations