Security and Hardening
Threat-models the trust boundaries before writing a single control.
Install
npx skills add addyosmani/agent-skills --skill security-and-hardening
Kullanıcı girdisi, kimlik doğrulama, dosya yükleme, webhook ya da kişisel veri işleyen bir şey yazılırken
- Author
- Addy Osmani
- License
- MIT
It starts by mapping where untrusted data enters the system — requests, form fields, uploads, webhooks, third-party APIs and LLM output — naming the assets worth stealing, then running STRIDE across each boundary. Controls are written only after that, which keeps each one tied to a named threat instead of a generic checklist. Coverage spans OWASP Top 10 territory, authentication and session handling, secrets management, and privacy obligations under GDPR and CCPA.
Similar skills
Threat Model Analyst
SkillBuilds a STRIDE-A threat model of a repository and keeps it current as code moves.
Backend API Security
SkillTwo backend agents that write secure API code rather than audit it after the fact.
AWS Agents for DevSecOps
SkillRoutes incident, release-readiness, scan and pentest work to the AWS DevOps and Security agents.
Comments(0)
Sign in to comment