Alternatives to security-and-hardening
50 AI Skills apps to use instead, best rated first.
Top picks
- W

webapp-testing
LaunchNative Python Playwright scripts for testing local web applications with server lifecycle management. Includes with_server.py helper to automatically start and manage single or multiple servers before running automation scripts. Supports re
- C

content-research-writer
LaunchAssists in writing high-quality content by conducting research, adding citations, improving hooks, iterating on outlines, and providing real-time feedback on
- O

openhue
Launchopenhue is an agent skill from the OpenClaw project, listed on skills.sh. It lets an agent control Philips Hue lights and scenes through a Hue Bridge with the OpenHue CLI: turn lights on and off, dim rooms, set scenes such as movie mode, an
- B

batch-grill-me
Launchbatch-grill-me is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It interviews you relentlessly about a plan until you share an understanding. It maps decisions as a tree and asks every question it can answer now
- I

implement
Launchimplement is an agent skill from Matt Pocock's skills collection, listed on skills.sh. It implements work from a spec or tickets: it fetches the ticket, works test-first at agreed seams, runs type checks and tests as it goes, reviews the re
- F

frontend-design
LaunchDistinctive, production-grade frontend interfaces that reject generic AI aesthetics through intentional design choices. Guides aesthetic direction selection (brutalist, maximalist, retro-futuristic, luxury, organic, etc.) before implementat
More AI Skills apps

brainstorming
Transform rough ideas into fully-formed designs through structured questioning

finishing-a-development-branch
Guides completion of development work by presenting clear options

test-driven-development
Use when implementing any feature or bugfix, before writing implementation code
About security-and-hardening

security-and-hardening
Hardens code against vulnerabilities
security-and-hardening is an agent skill from Addy Osmani's agent-skills collection that brings security-first practices to web application development. It asks the agent to treat every external input as hostile, every secret as sacred, and every authorization check as mandatory. Security is framed as a constraint on every line of code that touches user data, authentication or external systems, rather than a phase at the end of a project. The skill's process starts with a threat model. Controls added without one are described as guesses, so before hardening, the agent is asked to spend a few minutes thinking like an attacker. The skill applies when building anything that accepts user input, implementing authentication or authorization, storing or transmitting sensitive data, integrating with external APIs or services, adding file uploads, webhooks or callbacks, and handling payment or personal data. It is listed on skills.sh, with its security audit results shown there. The skill is a guide for how an agent should write code, not an audit tool, and it suits developers and agents who build features that handle user data and want the security reasoning built in from the start.
- Price
- Free
- Made by
- addyosmani
- Category
- AI Skills
- Website
- github.com/addyosmani/agent-skills/security-and-hardening
