security-and-hardening
security-and-hardening is an agent skill published by addyosmani, listed under business & ops. It lives in the addyosmani/agent-skills repository, which has 110,611 GitHub stars and is licensed under MIT; we last read it on 2026-09-25.
Hardens code against vulnerabilities by auditing input handlers, authentication, data storage, and external integrations, as well as checking login flows against the OWASP Top Ten. It is used for features that accept untrusted data, manage user sessions, or interact with third-party services, and for auditing dependencies and assessing supply-chain risk, especially when personal data or privacy compliance is involved.
Install
skills is a generic installer for any repository of Claude agent skills -- it reads addyosmani/agent-skills’s own structure rather than assuming one, the same way this page reads the skill’s own SKILL.md rather than assuming a format.
npx skills add addyosmani/agent-skills
Maintenance
Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling user input, authentication, data storage, or external integrations, or when checking a login flow is safe against the OWASP Top Ten. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when auditing dependencies for known vulnerabilities, triaging package-manager audit findings, or assessing supply-chain risk in a new package. Use when personal data or privacy compliance (GDPR, CCPA) is involved.
security-and-hardening compared with similar skills
| Skill | Publisher | What it does | Repo stars | Last update |
|---|---|---|---|---|
| security-and-hardening (this page) | addyosmani | Hardens code against vulnerabilities. Use when auditing an input handler for vulnerabilities, when handling u… | 110,611 | 2026-10-13 |
| constraint-driven-development(same repository) | addyosmani | Establishes a project's quality bar as a written contract and stops agents quietly lowering it. Interviews th… | 110,611 | 2026-10-13 |
| deprecation-and-migration(same repository) | addyosmani | Manages deprecation and migration. Use when removing old systems, APIs, or features. Use when migrating users… | 110,611 | 2026-10-13 |
| cloud-databases-onboarding | Guides users through discovering their database requirements, recommends a Google Cloud database based on a r… | 21,580 | 2026-10-25 | |
| gke-batch-hpc | Runs batch and HPC workloads on GKE, utilizing job queues and parallel processing. Use when running GKE batch… | 21,580 | 2026-10-25 | |
| google-cloud-filestore-auditing | Audits Filestore instances on Google Cloud across projects for disaster recovery readiness (missing or stale… | 21,580 | 2026-10-25 | |
| github-project-contributor-finder-api-skill | browser-act | This skill helps users extract GitHub repository project details and contributor contact information using ke… | 6,277 | 2026-08-24 |
Skills from the same repository first, then others for this job by repository stars. Figures are from each repository when we last read it.
Common questions about security-and-hardening
- What does security-and-hardening do?
- Hardens code against vulnerabilities by auditing input handlers, authentication, data storage, and external integrations, as well as checking login flows against the OWASP Top Ten. It is used for features that accept untrusted data, manage user sessions, or interact with third-party services, and for auditing dependencies and assessing supply-chain risk, especially when personal data or privacy compliance is involved.
- How do I install security-and-hardening?
- Run npx skills add addyosmani/agent-skills. The skills installer reads the repository’s own structure, so it works for any repository of agent skills.
- Who publishes security-and-hardening?
- addyosmani.
- Is security-and-hardening maintained, and what licence does it use?
- Its repository has 110,611 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-13. The repository declares the MIT licence.
More agent skills for business & ops
- constraint-driven-developmentby addyosmani
- deprecation-and-migrationby addyosmani
- base-mcpby base
- github-project-contributor-finder-api-skillby browser-act
- linkedin-jobs-searchby browser-act
- agent-experienceby browserbase