Spatie Security Guidelines

Overview

Apply Spatie's security best practices when building, configuring, or reviewing applications and infrastructure.

When to Activate

• Activate this skill when configuring application security (authentication, authorization, forms).
• Activate this skill when setting up or reviewing database configurations.
• Activate this skill when configuring servers or reviewing infrastructure.
• Activate this skill when reviewing code for security vulnerabilities.
• Activate this skill when configuring or creating signed Git commits.

Scope

• In scope: Application security, database security, server configuration, credential management, signed Git commits.
• Out of scope: Code style, business logic, UI/UX design.