Harden Applications Against Security Risks
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
Review the Skillstore skill "security-and-hardening" from https://skillstore.io/skills/addyosmani-security-and-hardening.md and its manifest at https://skillstore.io/api/skills/addyosmani-security-and-hardening/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
「security-and-hardening」を使用しています。 Review an endpoint that accepts a webhook URL and fetches it on behalf of a user.
期待される結果:
「security-and-hardening」を使用しています。 Assess an LLM feature that renders model replies in a web page.
期待される結果:
「security-and-hardening」を使用しています。 Triage a high-severity package advisory from a native package-manager audit.
期待される結果:
All 96 findings are false positives from examples and Markdown in SKILL.md. No executable behavior or prompt injection was found.
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-security-and-hardening?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-security-and-hardening?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-security-and-hardening/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-security-and-hardening.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). security-and-hardening security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2@techreport{addyosmani-addyosmani-security-and-hardening-2026,
author = {addyosmani},
title = {security-and-hardening security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-and-hardening security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-security-and-hardening:audit:2"
description: "Skillstore immutable audit report identifier"
Map trust boundaries, validate request data, check authorization, and identify abuse cases before shipping an endpoint.
Triage audit results by reachability, review install scripts and provenance, and define a documented remediation decision.
Evaluate prompt injection, unsafe model output, excessive tool permissions, data exposure, and unbounded consumption risks.
Review this feature for trust boundaries, untrusted inputs, authentication, authorization, and sensitive data exposure. List the three most important fixes.
Audit this API endpoint against relevant OWASP risks. Check validation, queries, output encoding, access control, rate limits, errors, and logging. Cite issues and propose fixes.
Triage these package audit results. Check reachability, available fixes, install scripts, provenance, and lockfile impact. Recommend an action and review date.
Threat-model this LLM feature. Analyze prompt injection, unsafe output, data exposure, tool permissions, retrieval isolation, SSRF, limits, and irreversible actions. Prioritize controls and tests.
作成者
addyosmaniライセンス
MIT
Skillstore リビジョン
r2
バージョンに関する注意
作者はバージョンを宣言していません。
参照
5d5054f8a23586f9b500fece1cb613a9dffc787b
メンテナンスの新しさ
2026/9/19
利用状況
1 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
Examiner le code selon cinq axes de qualité
Les modifications de code peuvent dissimuler des problèmes de fiabilité, de sécurité, d’architecture, de lisibilité et de performances. Cette compétence applique un processus d’examen structuré et produit des retours hiérarchisés et exploitables.
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Discover and Apply Agent Skills
Teams often lose time choosing the right workflow for a software task. This skill maps task context to focused agent skills and a practical development sequence.
Renforcer les revues de sécurité des applications
作成者 alirezarezvani
Les revues de sécurité manquent souvent de listes de contrôle cohérentes et de flux de travail réutilisables. Cette compétence fournit des structures de base pour les revues de sécurité, des conseils de référence et des scripts de reporting simples pour Claude, Codex et Claude Code.
Auditer le code pour détecter les risques de sécurité
作成者 Barnhardt-Enterprises-Inc
Le code sensible à la sécurité peut facilement être livré avec des failles cachées dans l’authentification, la gestion des entrées et les secrets. Cette compétence fournit à Claude, Codex et Claude Code des références de sécurité structurées et des recommandations de scanner pour des revues plus sûres.
Créer des API backend sécurisées
作成者 sickn33
Les équipes backend ont besoin d’implémentations sécurisées qui empêchent les vulnérabilités courantes. Cette compétence guide la validation, l’authentification, le renforcement des API, la protection des bases de données et les revues de sécurité.
Examiner le code selon les fondamentaux de la sécurité
作成者 DanielPodolsky
Les erreurs de sécurité apparaissent souvent dans des domaines courants comme l’authentification, l’autorisation, le traitement des entrées et l’exposition des données. Cette compétence donne à Claude, Codex et Claude Code une checklist ciblée pour repérer ces risques pendant la revue.
Audit Python Web Apps Before Release
作成者 glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
Renforcer les décisions d’ingénierie de la sécurité
作成者 89jobrien
Le travail de sécurité couvre souvent l’architecture, l’identité, la conformité, les tests et la planification de la réponse. Cette compétence fournit à Claude, Codex et Claude Code des conseils structurés en ingénierie de la sécurité.