security-and-hardening

by addyosmani 82k MIT Updated Aug 5, 2026
security-and-hardening skill by addyosmani
security-and-hardening — Security skill by addyosmani

security-and-hardening is an open-source security skill for Claude Code and compatible agents, published by addyosmani. Its author describes it as: “Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interact…”. The project has 82k stars on GitHub and is available under the MIT license. Add it to your setup with `/plugin marketplace add addyosmani/agent-skills`.

Installation

Add security-and-hardening to your agent with:

/plugin marketplace add addyosmani/agent-skills

Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.

When to use it

Reach for security-and-hardening when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.

Strengths

  • Clear MIT license — safe to read and adapt
  • Ships in addyosmani/agent-skills, an established project with 82,220 GitHub stars
  • Actively maintained (recent commits)

Topics

agent-skillsantigravityclaude-codecodexcursorskills

Frequently asked questions

What does security-and-hardening do?
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
How do I install security-and-hardening?
Run /plugin marketplace add addyosmani/agent-skills in your agent, then reload your skills. Review the source at https://github.com/addyosmani/agent-skills before installing.
Is security-and-hardening free to use?
Yes. security-and-hardening is free and open source under the MIT license, so you can read, run, and adapt it within that license's terms.
Where does security-and-hardening come from?
security-and-hardening ships inside addyosmani/agent-skills, a repository that contains 25 catalogued skills in total. The repository's 82,220 GitHub stars apply to that whole collection, not to this skill on its own.

Related skills

More Security →

Subjects every non-trivial decision to a fresh-context adversarial review before it stands. Use when correctness matters more than speed, when working in unfamiliar code, when stakes are high (production, security-sensitive logic, irreversible operations), or any time a confident output would be cheaper to verify now than to debug later.

82k addyosmani MIT

Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.

45k sickn33 MIT

Find and fix WCAG 2.2 accessibility issues. Two modes — report (sweep a codebase or page, produce a prioritized written report, no edits) and fix (audit→edit→verify loop on a target). Prefers direct-CDP live-DOM auditing; falls back to a browser-MCP composition or HTML-string audits.

45k sickn33 MIT

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches. AI agents running in CI/CD pipelines.

45k sickn33 MIT