Security and Hardening

addyosmani/agent-skills

Threat-model sensitive code and apply security controls for input, authentication, dependencies and personal data.

Материал обновлён:

В коллекцииAddy's Agent Skills ↗
Открыть на GitHub
npx skills add addyosmani/agent-skills --skill security-and-hardening
116 280Звёзды12 180ФоркиПоследний push репозитория

Об этом Skill

Threat-model sensitive code and apply security controls for input, authentication, dependencies and personal data. Identify trust boundaries first, audit dependencies and implement controls with attention to authorization, secrets and data handling.

Почему мы его выбрали

A task workflow in Addy's Agent Skills. Follow the upstream instructions and retain referenced shared files; host capabilities and project configuration determine which steps can run.

Для каких задач подходит

  • A feature processes user input, credentials, personal data or external services.

Workflow and deliverables

Identify trust boundaries first, audit dependencies and implement controls with attention to authorization, secrets and data handling.

A threat assessment, concrete hardening changes and evidence for the controls relevant to the task.

Security and Hardening instructions

Install with the required references

Install the complete pack through a documented repository integration when shared references are needed. A per-skill skills CLI install copies only skills/<name>/ and can omit the repository-level references/ checklists; keep the needed shared files with the workflow.

Upstream overview and integrations

Перед использованием

  • An Agent that can load Skill Markdown and access your project. File edits, shell commands, builds and checks depend on the selected workflow and its environment.
  • Use your project's own runtimes, dependencies and verification commands. The Skill files provide instructions and do not install those project tools.
  • Install the complete pack through a documented repository integration when shared references are needed. A per-skill skills CLI install copies only skills/<name>/ and can omit the repository-level references/ checklists; keep the needed shared files with the workflow.

Поддерживаемые агенты

Claude CodeCodex CLICursorGitHub CopilotGemini CLIOpenCodeKiroGoogle Antigravity

Источники и материалы

Ссылки на оригинальные материалы приведены ниже. Практические идеи предложены редакцией SkillHey.