security▌

Survey codebases and produce implementation plans for improvements.

Perform comprehensive security audits of frontend codebases to identify vulnerabilities, bad practices, and missing protections.

Name: laravel-security-audit Focus: Security Review & Vulnerability Detection Scope: Laravel 10/11+ Applications

Comprehensive security auditing workflow for web applications, APIs, and infrastructure. This bundle orchestrates skills for penetration testing, vulnerability assessment, security scanning, and remediation.

Comprehensive guide to preventing OWASP Top 10 vulnerabilities with code examples. \n \n Covers all 10 categories with prevention patterns: access control, cryptography, injection, design flaws, misconfiguration, vulnerable dependencies, authentication, data integrity, logging, and SSRF \n Includes production-ready TypeScript/Node.js code examples for each vulnerability type, from parameterized queries to secure password hashing and JWT token management \n Provides practical implementations for

Comprehensive security hardening for web applications covering HTTPS, input validation, authentication, and OWASP Top 10 vulnerabilities. \n \n Enforces HTTPS, security headers (CSP, HSTS), and rate limiting via Helmet and Express middleware to prevent DDoS and common attacks \n Prevents SQL Injection and XSS through parameterized queries, input validation with Joi, and output encoding with DOMPurify \n Implements CSRF token protection, JWT-based authentication with refresh token rotation, and s

Security audit framework for web applications and REST APIs covering OWASP Top 10 vulnerabilities. \n \n 20 rules organized across 5 categories: Authentication & Authorization, Data Protection, Input/Output Security, Configuration & Headers, and API & Monitoring \n Covers critical vulnerabilities including injection attacks, broken access control, cryptographic failures, CSRF, SSRF, and insecure deserialization with code examples for both vulnerable and secure patterns \n Includes

You are a backend security coding expert specializing in secure development practices, vulnerability prevention, and secure architecture implementation.

CRITICAL INSTRUCTION FOR AI AGENTS: You are NOT just a command-runner. You are the Lead Security Analyst. This tool provides the data, but YOU provide the intelligence.

Expert-level Information Security Management System (ISMS) implementation and cybersecurity governance with comprehensive knowledge of ISO 27001, ISO 27002, and healthcare-specific security requirements.