Security and Hardening

addyosmani/agent-skills

Threat-model sensitive code and apply security controls for input, authentication, dependencies and personal data.

Conteúdo atualizado:

Ver no GitHub
npx skills add addyosmani/agent-skills --skill security-and-hardening
116.280Estrelas12.180ForksÚltimo push do repositório

Sobre este Skill

Threat-model sensitive code and apply security controls for input, authentication, dependencies and personal data. Identify trust boundaries first, audit dependencies and implement controls with attention to authorization, secrets and data handling.

Por que escolhemos

A task workflow in Addy's Agent Skills. Follow the upstream instructions and retain referenced shared files; host capabilities and project configuration determine which steps can run.

No que ajuda

  • A feature processes user input, credentials, personal data or external services.

Workflow and deliverables

Identify trust boundaries first, audit dependencies and implement controls with attention to authorization, secrets and data handling.

A threat assessment, concrete hardening changes and evidence for the controls relevant to the task.

Security and Hardening instructions

Install with the required references

Install the complete pack through a documented repository integration when shared references are needed. A per-skill skills CLI install copies only skills/<name>/ and can omit the repository-level references/ checklists; keep the needed shared files with the workflow.

Upstream overview and integrations

Antes de usar

  • An Agent that can load Skill Markdown and access your project. File edits, shell commands, builds and checks depend on the selected workflow and its environment.
  • Use your project's own runtimes, dependencies and verification commands. The Skill files provide instructions and do not install those project tools.
  • Install the complete pack through a documented repository integration when shared references are needed. A per-skill skills CLI install copies only skills/<name>/ and can omit the repository-level references/ checklists; keep the needed shared files with the workflow.

Agentes compatíveis

Claude CodeCodex CLICursorGitHub CopilotGemini CLIOpenCodeKiroGoogle Antigravity

Fontes e referências

As fontes originais estão nos links abaixo. As sugestões práticas são recomendações editoriais do SkillHey.