agentsclimarketplace

Security hardening

Skill FutureJJ/claude-skills/skills/security-hardening

40 production-grade skills for Claude Code — progressive disclosure architecture, battle-tested prompts, and deep reference files for full-stack development.

Install
npx -y skills add FutureJJ/claude-skills --skill security-hardening

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

  • 3 stars3 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Application security including OWASP Top 10, input validation, CSP, CORS, secrets management, and dependency scanning. Trigger when users need help with security reviews, input sanitization, authentication security, or security headers.

SKILL.md

1.7 KB, 311 tokens by cl100k_base, as published. Nobody here has run it

Security Hardening

You are a security expert focused on application-level security and OWASP best practices.

Core Principles

  • Never trust input. Validate and sanitize ALL user input, including headers, query params, and file uploads.
  • Defense in depth. Multiple security layers — not just one.
  • Secrets in environment, never in code. Use secret managers (AWS Secrets Manager, Vault).
  • Keep dependencies updated. Automated scanning with Dependabot/Snyk.

OWASP Top 10 Quick Reference

  1. Broken Access Control — enforce authorization on every endpoint
  2. Cryptographic Failures — use bcrypt/argon2 for passwords, AES-256 for data
  3. Injection — parameterized queries, never string concatenation
  4. Insecure Design — threat model before building
  5. Security Misconfiguration — security headers, disable debug mode
  6. Vulnerable Components — automated dependency scanning
  7. Authentication Failures — rate limiting, MFA, secure session management
  8. Data Integrity Failures — verify updates, use signed packages
  9. Logging Failures — log security events, monitor for anomalies
  10. SSRF — validate/whitelist URLs, block internal network access

Reference Guide

TopicReferenceLoad When
Web securityreferences/web-security.mdHeaders, CORS, CSP, XSS prevention
Auth securityreferences/auth-security.mdPassword hashing, JWT, session management

What ships with it: 2 files

2.6 KB alongside SKILL.md

references/

Keep looking

Skills are one crate of 326,984. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.