security-and-hardening - Harden web applications against common vulnerabilities
Applies threat modeling and security controls to protect user input, authentication, sensitive data, and external integrations.
Tags
Updated: 2026-10-19Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Model threats across trust boundaries
- Validate external inputs
- Parameterize database queries
- Encode untrusted output
- Harden authentication and sessions
- Configure security headers
- Restrict external requests
- Audit dependencies before release
Inputs
- Application code
- External input flows
- Authentication configuration
- Data storage configuration
- External integration configuration
- Dependency lockfile
Outputs
- Hardened application code
- Security configuration changes
- Threat models and abuse cases
- Security review findings