Menu
Use for auth, payments, secrets, file upload, webhooks, admin actions, database access, RLS, user-generated content, external APIs, and release review.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | Security Hardening |
| description | Use for auth, payments, secrets, file upload, webhooks, admin actions, database access, RLS, user-generated content, external APIs, and release review. |
| allowed-tools | Read, Bash, Edit, MultiEdit, Write |
Use this skill for safety-critical code paths.
List findings by severity with file references and concrete fix. Do not invent vulnerabilities without evidence.
Use when setting up or repairing repo agent instructions for Claude Code, Codex, or both. Proposes durable AGENTS.md, CLAUDE.md, and project memory changes before writing unless setup was explicitly requested.
Use for backend routes, API design, validation, database interactions, auth boundaries, response shapes, typed clients, error models, and integration-safe changes.
Use for slow pages, large bundles, slow APIs, database performance, caching, rendering jank, long sessions, and production-readiness polish.
Use for high-end UI, SaaS dashboards, landing pages, product websites, mobile responsive UI, visual redesign, UI polish, empty/loading/error states, motion, typography, and design quality rescue.
Use for long-running projects, context compaction, resume/handoff work, multi-session builds, or when the user asks to preserve project state. Proposes small verified memory docs before creating them unless setup was explicitly requested.
Use automatically for Claude Code work involving files, tools, bash, edits, tests, long commands, failed tool calls, or unfamiliar repos. Improves tool choice, prevents loops, and keeps work high-quality without adding broad context.
