security-and-hardening

1. Trigger Conditions

Invoke this skill as a mandatory quality gate after implementation and before PR creation.

Specific triggers:

• /secure slash command
• Phase 5 of /build-feature master workflow (quality gate)
• Before any code that handles authentication, user data, or external inputs is committed
• When adding a new API endpoint, form, or file upload

2. Prerequisites

• Implementation complete for the current slice or feature
• Access to the modified files and any new dependencies added

3. Steps