Harden Applications Against Security Risks
Security reviews can miss trust boundaries and unsafe data flows. This skill supplies threat-modeling prompts, OWASP patterns, and practical review checklists.
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
Review the Skillstore skill "security-and-hardening" from https://skillstore.io/skills/addyosmani-security-and-hardening.md and its manifest at https://skillstore.io/api/skills/addyosmani-security-and-hardening/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
正在使用「security-and-hardening」。 Review an endpoint that accepts a webhook URL and fetches it on behalf of a user.
預期結果:
正在使用「security-and-hardening」。 Assess an LLM feature that renders model replies in a web page.
預期結果:
正在使用「security-and-hardening」。 Triage a high-severity package advisory from a native package-manager audit.
預期結果:
All 96 findings are false positives from examples and Markdown in SKILL.md. No executable behavior or prompt injection was found.
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/addyosmani-security-and-hardening?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/addyosmani-security-and-hardening?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/addyosmani-security-and-hardening/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/addyosmani-security-and-hardening.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>addyosmani. (2026). security-and-hardening security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2@techreport{addyosmani-addyosmani-security-and-hardening-2026,
author = {addyosmani},
title = {security-and-hardening security audit report (audit version 2)},
institution = {Skillstore},
year = {2026},
number = {2},
url = {https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2},
note = {Author version unspecified}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "security-and-hardening security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
- name: "addyosmani"
date-released: "2026-09-19"
url: "https://skillstore.io/skills/addyosmani-security-and-hardening/audits/2"
identifiers:
- type: other
value: "skillstore:addyosmani-security-and-hardening:audit:2"
description: "Skillstore immutable audit report identifier"
Map trust boundaries, validate request data, check authorization, and identify abuse cases before shipping an endpoint.
Triage audit results by reachability, review install scripts and provenance, and define a documented remediation decision.
Evaluate prompt injection, unsafe model output, excessive tool permissions, data exposure, and unbounded consumption risks.
Review this feature for trust boundaries, untrusted inputs, authentication, authorization, and sensitive data exposure. List the three most important fixes.
Audit this API endpoint against relevant OWASP risks. Check validation, queries, output encoding, access control, rate limits, errors, and logging. Cite issues and propose fixes.
Triage these package audit results. Check reachability, available fixes, install scripts, provenance, and lockfile impact. Recommend an action and review date.
Threat-model this LLM feature. Analyze prompt injection, unsafe output, data exposure, tool permissions, retrieval isolation, SSRF, limits, and irreversible actions. Prioritize controls and tests.
作者
addyosmani授權
MIT
Skillstore 修訂
r2
版本提示
作者未聲明版本。
引用
5d5054f8a23586f9b500fece1cb613a9dffc787b
維護新鮮度
2026/9/19
使用量
1 次下載 · 0 次瀏覽
檔案結構
📄 SKILL.md
Clarify User Intent Before You Build
Underspecified requests cause teams to build the wrong outcome and discover misalignment late. This skill runs a focused, one-question interview that turns ambiguity into confirmed intent.
依五大品質面向審查程式碼
程式碼變更可能隱藏正確性、安全性、架構、可讀性與效能問題。此 skill 採用結構化的審查流程，並產出依優先順序排列且可採取行動的意見。
Plan Work Into Verifiable Tasks
Large or vague software work can hide dependencies, missing acceptance criteria, and verification gaps. This skill converts a specification into ordered task slices with checkpoints, scope guidance, and clear completion conditions.
Document Decisions and Architecture Clearly
Teams lose context when important technical decisions remain in chat, code comments, or individual memory. This skill turns architectural reasoning, API guidance, project instructions, and release changes into structured documentation.
Build Accessible, Production-Ready Frontends
Frontend work can become inconsistent, inaccessible, or difficult to maintain. This skill guides component architecture, responsive layouts, state handling, and polished user experiences.
Discover and Apply Agent Skills
Teams often lose time choosing the right workflow for a software task. This skill maps task context to focused agent skills and a practical development sequence.
強化應用程式安全審查
由 alirezarezvani
安全審查通常缺乏一致的檢查清單和可重複使用的工作流程。此技能為 Claude、Codex 和 Claude Code 提供安全審查腳手架、參考指南和簡單的報告指令碼。
稽核程式碼的安全風險
由 Barnhardt-Enterprises-Inc
安全敏感程式碼很容易在身分驗證、輸入處理和機密方面帶著隱藏缺陷就被發布。此技能為 Claude、Codex 和 Claude Code 提供結構化的安全參考和掃描器指引，以進行更安全的審查。
建置安全的後端 API
由 sickn33
後端團隊需要能防止常見弱點的安全實作。此技能會引導驗證、身分驗證、API 強化、資料庫保護與安全審查。
檢閱程式碼的安全性基礎
由 DanielPodolsky
安全性錯誤經常出現在身分驗證、授權、輸入處理和資料暴露等常見領域。此技能提供 Claude、Codex 和 Claude Code 一份聚焦的檢查清單，用於在檢閱期間找出這些風險。
Audit Python Web Apps Before Release
由 glenskii
Python teams need repeatable checks for common application security controls. This skill provides configurable pytest coverage with clear evidence, boundaries, and release decisions.
強化安全工程決策
由 89jobrien
安全工作通常橫跨架構、身分、合規、測試和回應規劃。此技能為 Claude、Codex 和 Claude Code 提供結構化的安全工程指引。