security-hardening
Installation
SKILL.md
Security Hardening Skill
Implement comprehensive security practices to protect web applications from common vulnerabilities.
OWASP Top 10 (2024)
| Risk | Prevention |
|---|---|
| Injection | Parameterized queries, input validation |
| Broken Auth | MFA, secure sessions, rate limiting |
| Sensitive Data | Encryption at rest/transit, minimal exposure |
| XXE | Disable external entities, use JSON |
| Broken Access | RBAC, verify ownership |
| Misconfig | Security headers, disable debug |
| XSS | Output encoding, CSP |
| Insecure Deserialization | Validate input, use safe formats |
| Vulnerable Components | Audit deps, update regularly |
| Logging Gaps | Log security events, monitor |