
Agent Skills cover with Spec, Plan, Build, Test, Review, Simplify and Ship workflow labels.
Project screenshotsAbout this Skill
Threat-model sensitive code and apply security controls for input, authentication, dependencies and personal data. Identify trust boundaries first, audit dependencies and implement controls with attention to authorization, secrets and data handling.
Why we picked it
A task workflow in Addy's Agent Skills. Follow the upstream instructions and retain referenced shared files; host capabilities and project configuration determine which steps can run.
What it helps with
- A feature processes user input, credentials, personal data or external services.
Workflow and deliverables
Identify trust boundaries first, audit dependencies and implement controls with attention to authorization, secrets and data handling.
A threat assessment, concrete hardening changes and evidence for the controls relevant to the task.
Install with the required references
Install the complete pack through a documented repository integration when shared references are needed. A per-skill skills CLI install copies only skills/<name>/ and can omit the repository-level references/ checklists; keep the needed shared files with the workflow.
Before you use it
- An Agent that can load Skill Markdown and access your project. File edits, shell commands, builds and checks depend on the selected workflow and its environment.
- Use your project's own runtimes, dependencies and verification commands. The Skill files provide instructions and do not install those project tools.
- Install the complete pack through a documented repository integration when shared references are needed. A per-skill skills CLI install copies only skills/<name>/ and can omit the repository-level references/ checklists; keep the needed shared files with the workflow.
Supported agents
Sources & references
Original sources are linked below. Practical starting points are editorial suggestions from SkillHey.


