Security And Hardening
Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services.
Overview
Security And Hardening is a SKILL.md workflow from addyosmani/agent-skills. It is categorized under security and links back to its reviewed source so users can inspect the complete instructions and bundled resources before installation.
Use Cases
Install Notes
# Review source first
open https://github.com/addyosmani/agent-skills/blob/main/skills/security-and-hardening/SKILL.mdCopy the reviewed skill folder into the skills directory used by your compatible agent.
Security Notes
AIToolly validated the published source structure and license automatically. Review addyosmani/agent-skills and any bundled scripts again before granting workspace, command, or network access.
Related Skills
Trailmark Summary
trailofbits/skills
Runs a Trailmark summary analysis on a codebase. Returns auto-detected languages, entry point count, and dependency list. Use when vivisect or galvanize needs a quick structural overview. Triggers: trailmark summary, code summary, structural overview.
Cargo Fuzz
trailofbits/skills
cargo-fuzz is the de facto fuzzing tool for Rust projects using Cargo. Use for fuzzing Rust code with libFuzzer backend.
Skill Improver
trailofbits/skills
Iteratively reviews and fixes Claude Code skill quality issues until they meet standards. Runs automated fix-review cycles using the skill-reviewer agent. Use to fix skill quality issues, improve skill descriptions, run automated skill review loops, or iteratively refine a skill. Triggers on 'fix my skill', 'improve...
Trailmark Structural
trailofbits/skills
Runs full Trailmark structural analysis on Trailmark 0.2.x by building a graph, running `preanalysis()`, and reporting hotspots, taint, blast radius, privilege boundaries, and attack surface. Use when vivisect needs detailed structural data for a target. Triggers: structural analysis, blast radius, taint analysis, c...
Yara Rule Authoring
trailofbits/skills
Guides authoring of high-quality YARA-X detection rules for malware identification. Use when writing, reviewing, or optimizing YARA rules. Covers naming conventions, string selection, performance optimization, migration from legacy YARA, and false positive reduction. Triggers on: YARA, YARA-X, malware detection, thr...
Diagramming Code
trailofbits/skills
Generates Mermaid diagrams from Trailmark code graphs. Produces call graphs, class hierarchies, module dependency maps, containment diagrams, complexity heatmaps, and attack surface data flow visualizations. Use when visualizing code architecture, drawing call graphs, generating class diagrams, creating dependency m...