Description
laravel-security is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It gives an agent security best practices for Laravel applications. It covers authentication and authorisation, including the Sanctum, Passport, Jetstream and Breeze options, user roles, permissions and policies, safe Eloquent queries and migrations, protection against CSRF and cross-site scripting, the security of APIs, and the production configuration and environment variables that matter when an app is deployed. The skill applies when an agent sets up authentication or authorisation, implements roles or permissions, configures production settings, reviews an application for vulnerabilities, deploys to production, or writes queries and migrations. It is a checklist-style reference an agent can apply while writing or reviewing code, and it does not replace a dedicated security assessment. A skill is a SKILL.md file of instructions that an AI agent loads when a task calls for it. It is free and open source, and the skills.sh listing shows all three security audits passing.…
Highlights
- Sanctum, Passport, Jetstream and Breeze auth
- Roles, permissions and policies
- CSRF and XSS protection
- Production settings and environment variables
Ratings & Reviews
No ratings yet
Be the first to rate laravel-security.
People also visit
laravel-security FAQ
What does the laravel-security skill cover?
Security practice for Laravel: authentication and authorisation, Eloquent safety, CSRF and XSS, API security and production settings.
Which auth packages does it name?
Sanctum, Passport, Jetstream and Breeze.
Can it replace a security assessment?
No. It is a checklist for an agent to apply while writing or reviewing code.
How do I install it?
Run: npx skills add https://github.com/affaan-m/ecc --skill laravel-security
Is it free?
Yes. It is free and open source.
Are there security findings?
The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.
What are the best laravel-security alternatives?
Popular alternatives to laravel-security include django-security, laravel-patterns and laravel-plugin-discovery. See all laravel-security alternatives