Security-hardening Skill

Implement comprehensive security hardening following OWASP guidelines.

When to Use

• Initial app security setup
• Adding CSP headers
• Implementing token management
• Validating user input
• Preventing XSS attacks

Content Security Policy

See references/security-examples.md for full CSP configuration with:

• default-src 'self', script-src 'self'
• connect-src 'self' https://api.github.com
• No unsafe-inline for scripts
• Security headers (X-Frame-Options, X-Content-Type-Options, etc.)