security-and-hardening

Mechanism

When It Triggers · How It Works · What It Produces

Breaks down how the skill works and what it produces, so you can quickly judge whether it fits your scenario and value.

Trigger

When handling user input
When implementing authentication or authorization
When storing sensitive data or integrating external services

Mechanism

Threat modeling: map trust boundaries, name assets, run STRIDE on each boundary
Three-tier boundary: always do (input validation, parameterized queries, output encoding) → ask first (new auth flows, storing sensitive data) → never do (commit secrets, downgrade security)
Dependency audit: run native security audit before every release
Write abuse cases: ask "how would I misuse this?" for each feature

Outcome

Security-hardened code with threat model, security checks, and dependency audit report

Use Cases

Two Typical Use Cases

Scenario 01

Authentication System Security Hardening

When building a login system, the agent performs threat modeling, identifies trust boundaries, runs STRIDE analysis, ensures password hashing, session management, CSRF protection, and rate limiting are in place against common attack vectors.

Scenario 02

Third-Party API Integration Security Review

When integrating external APIs, the agent reviews security risks including API key management, request/response validation, HTTPS enforcement, error message leak prevention, and rate limiting, ensuring the integration doesn't become an attack vector.

Skill Relationships

Which Skills I Use · Which Skills Use Me

Dependency relationships read as "the upper tier points to the lower tier." The current Skill sits in the middle tier — above are Skills that depend on it, below are Skills it depends on.

Tier 1 · These Skills Use Me

No explicit dependency

Tier 2 · Current Skill

security-and-hardeningWorkflow

Tier 3 · I Use These Skills

No explicit dependency on other Skills

Full Relationship Graph

Browse this skill's relationships within its skillset. Click a node to switch the side panel; use the search box to jump to any skill.

Skill File

SKILL.md

Open in GitHub ↗

SKILL.mdLoading from GitHub…

Skill Composition

Open in GitHub ↗

SKILL.md100.0%

▸skills/security-and-hardening/
▸security-and-hardening
- ·SKILL.md

Per the Agent Skills spec, SKILL.md is the only required file. The colored bars classify the rest into the three spec-aligned optional directories (scripts / references / assets) and an 'other' bucket. The full directory tree is below.

Related in Skillset

You May Also Need These Skills

api-and-interface-design

Guides agents to design stable, hard-to-misuse public interfaces using contract-first principles. Covers REST, GraphQL, module boundaries, component props, emphasizing Hyrum's Law, One-Version Rule, error semantics, and boundary validation. Produces consistent, maintainable, well-documented interface specifications.

Workflow

browser-testing-with-devtools

Browser testing skill that gives agents live browser runtime visibility via Chrome DevTools MCP. Supports DOM inspection, console log capture, network request analysis, performance profiling, and visual output verification. Bridges the gap between static code analysis and live browser execution.

CLI Manual

ci-cd-and-automation

CI/CD automation skill that guides agents to set up and maintain automated build and deployment pipelines. Emphasizes shifting quality gates left, integrating tests, lint, type checking, and build verification into every change. Follows the "smaller is faster is safer" principle with frequent small releases.

Workflow

code-review-and-quality

Code review and quality skill that guides agents to conduct multi-axis code reviews covering correctness, design, maintainability, security, and performance. Emphasizes change sizing (~100 lines), severity labels (Nit/Optional/FYI), and splitting strategies to ensure code quality before every merge.

Workflow

When It Triggers · How It Works · What It Produces

Trigger

Mechanism

Outcome

Two Typical Use Cases

Authentication System Security Hardening

Third-Party API Integration Security Review

Which Skills I Use · Which Skills Use Me

Full Relationship Graph

SKILL.md

Skill Composition

You May Also Need These Skills

api-and-interface-design

browser-testing-with-devtools

ci-cd-and-automation

code-review-and-quality

/security-and-hardening

Two Typical Use Cases

Authentication System Security Hardening

Third-Party API Integration Security Review

SKILL.md

Skill Composition

When It Triggers · How It Works · What It Produces

Trigger

Mechanism

Outcome

You May Also Need These Skills

api-and-interface-design

browser-testing-with-devtools

ci-cd-and-automation

code-review-and-quality

Which Skills I Use · Which Skills Use Me

Full Relationship Graph