laravel-security

laravel security

affaan-m 232k ↓ 5.9k MIT updated 25d ago
Claude Code
View source ↗

What it does

  • Setting up Laravel authentication and authorization (Sanctum, Passport, Jetstream, Breeze)
  • Implementing user roles, permissions, and policies
  • Configuring production security settings and environment variables
  • Reviewing Laravel applications for security vulnerabilities
  • Deploying Laravel applications to production
  • Writing secure Eloquent queries and migrations
  • laravel-patterns — Laravel architecture, routing, Eloquent, and API patterns

Requirements & configuration

  • Sanctum (API Token Authentication)
  • 'expiration' => 60 24, // Token expiration in minutes (null = never)
  • $token = $user->createToken('api-token', ['read', 'write'])->plainTextToken;
  • abort(403, 'Unauthorized. This area requires role: ' . $role);
  • // Avoid blanket 'api/' — stateful Sanctum routes need CSRF.

Configuration: APP_DEBUGAPP_KEY

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

laravel security

Source

Repository: https://github.com/affaan-m/everything-claude-code

laravel-security FAQ

What does the laravel-security skill do?

Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations. Setting up Laravel authentication and authorization (Sanctum, Passport, Jetstream, Breeze) Implementing user roles, permissions, and policies

What does laravel-security require?

Sanctum (API Token Authentication) 'expiration' => 60 24, // Token expiration in minutes (null = never) $token = $user->createToken('api-token', ['read', 'write'])->plainTextToken; abort(403, 'Unauthorized. This area requires role: ' . $role); // Avoid blanket 'api/' — stateful Sanctum routes need CSRF. Configuration keys: APP_DEBUG, APP_KEY.

How do I install laravel-security?

Run: npx -y skills add https://github.com/affaan-m/everything-claude-code --skill laravel-security --agent claude-code — the source lives at github.com/affaan-m/everything-claude-code.

Maintain laravel-security?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

laravel-security on getagentictools
[![laravel-security on getagentictools](https://getagentictools.com/badge/skills/affaan-m-everything-claude-code-laravel-security.svg)](https://getagentictools.com/skills/affaan-m-everything-claude-code-laravel-security?ref=badge)
npx agentictools info skills/affaan-m-everything-claude-code-laravel-security

The second line is the CLI lookup for this page — handy in READMEs and docs.