Security and Hardening Skill

# Security and Hardening Skill This skill is designed to harden code against vulnerabilities. It emphasizes security-first development practices for web applications, treating every external input as hostile and every secret as sacred. It is intended for use when handling user input, authentication, data storage, or external integrations. ## Key Features - **Security-first development practices** - **Validation of external input** - **Parameterized database queries** - **Output encoding to prevent XSS** - **Use of HTTPS for external communication** - **Password hashing with bcrypt/scrypt/argon2** - **Setting security headers** - **Secure session management** - **OWASP Top 10 prevention measures** ## When to Use - Building features that accept user input - Implementing authentication or authorization - Storing or transmitting sensitive data - Integrating with external APIs or services - Adding file uploads, webhooks, or callbacks - Handling payment or PII data ## Example Use Case A web application developer uses this skill to secure a user registration feature, ensuring that user input is validated and sanitized, passwords are hashed securely, and sensitive data is protected. ## Category Engineering ## Tags security, hardening, web application, vulnerability, authentication, authorization, data protection }