security-and-hardening — Skills

What it does

Building anything that accepts user input

Implementing authentication or authorization

Storing or transmitting sensitive data

Integrating with external APIs or services

Adding file uploads, webhooks, or callbacks

Handling payment or PII data

Validate all external input at the system boundary (API routes, form handlers)

Requirements & configuration

Ask First (Requires Human Approval)

git diff --cached | grep -i "password\|secret\|apikey\|token"

Constrain tool and agent permissions (LLM06: Excessive Agency). Scope tools to the minimum, require confirmation for destructive or irreversible actions, and validate every tool argument.

[ ] Admin actions require admin role verification

[ ] Tool/agent permissions scoped; destructive actions require confirmation

Configuration: SELECT

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.

Source

Repository: https://github.com/addyosmani/agent-skills

security-and-hardening FAQ

What does the security-and-hardening skill do?

What does security-and-hardening require?

Ask First (Requires Human Approval) git diff --cached | grep -i "password\|secret\|apikey\|token" Constrain tool and agent permissions (LLM06: Excessive Agency). Scope tools to the minimum, require confirmation for destructive or irreversible actions, and validate every tool argument. [ ] Admin actions require admin role verification [ ] Tool/agent permissions scoped; destructive actions require confirmation Configuration keys: SELECT.

How do I install security-and-hardening?

Run: npx -y skills add https://github.com/addyosmani/agent-skills --skill security-and-hardening --agent claude-code — the source lives at github.com/addyosmani/agent-skills.

Maintain security-and-hardening?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[![security-and-hardening on getagentictools](https://getagentictools.com/badge/skills/addyosmani-agent-skills-security-and-hardening.svg)](https://getagentictools.com/skills/addyosmani-agent-skills-security-and-hardening?ref=badge)

npx agentictools info skills/addyosmani-agent-skills-security-and-hardening

The second line is the CLI lookup for this page — handy in READMEs and docs.