Skip to content
security-and-hardening

Open source alternatives to security-and-hardening

24 open source AI Skills apps to use instead, best rated first.

Top picks

  1. G

    github-ops

    Launch

    github-ops is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It manages a GitHub repository with a focus on community health, CI reliability and the experience of contributors. It covers triaging issues by classify

    Open source

  2. O

    opensource-pipeline

    Launch

    opensource-pipeline is an agent skill from the ECC collection by affaan-m, listed on skills.sh. It prepares a private project for safe public release through a three-stage pipeline. The fork stage strips secrets from a copy. The sanitise st

    Open source

  3. A

    andrej-karpathy-skills

    Launch

    andrej-karpathy-skills is a single CLAUDE.md file from the multica-ai project that is meant to improve how Claude Code behaves on coding tasks. It is derived from Andrej Karpathy's public observations about LLM coding pitfalls. The file dis

    Open source

  4. M

    microsoft/markitdown

    Launch

    markitdown-mcp is the MCP server package for MarkItDown, Microsoft's tool for converting many file formats to Markdown for language models. It is a lightweight server that runs over stdio, Streamable HTTP or SSE, and exposes one tool, conve

    Open source

  5. O

    od-contribute

    Launch

    od-contribute is an agent skill in the OpenDesign project that provides a guided, one-click contribution flow to the OpenDesign repository, written so that people without a coding background can send a real pull request. It is locked to the

    Open source

  6. G

    github-deep-research

    Launch

    github-deep-research is an agent skill from the DeerFlow project that researches a single GitHub repository in several rounds and writes a report in Markdown. It is for requests that need more than a README summary, such as a comprehensive

    Open source

More AI Skills apps

See all
7
M

modelcontextprotocol/server-everything

Exercises all features of the MCP protocol

Launch
8
M

modelcontextprotocol/server-filesystem

Direct local file system access

Launch
9
M

modelcontextprotocol/server-memory

Knowledge graph-based persistent memory for maintaining context

Launch
10
N

netdata/netdata#Netdata

Discovery, exploration, reporting and root cause analysis over Netdata metrics

Launch
11
L

Learn Claude Code

by shareAI-lab - A really interesting analysis of how coding agents like Claude

Launch
12
C

career-ops

Job-search skill collection for JD evaluation, ATS resumes, portal scans

Launch
13
S

Sequential Thinking

Dynamic and reflective problem-solving through thought sequences

Launch
14
R

Reactive Resume

A one-of-a-kind resume builder that keeps your privacy in mind

Launch
15
E

elie222/inbox-zero

Inbox Zero features on top of Gmail, such as finding emails

Launch
16
S

simple-issue-description

Turn a rough bug report, feature request, support note

Launch
17
C

Compound Engineering Plugin

by EveryInc - A very pragmatic set of well-designed agents, skills

Launch
18
S

SuperClaude

by SuperClaude-Org

Launch
19
M

MCP Toolbox for Databases

MCP Toolbox for Databases enables your agent to connect to your database

Launch
20
A

awslabs/mcp

Suite of servers for integrating with AWS services and resources

Launch
21
R

Ralph for Claude Code

by Frank Bria - An autonomous AI development framework

Launch
22
M

mobilerun

Automate your mobile devices with natural language commands

Launch
23
O

openstatus

Manage monitors, status pages

Launch
24
C

Claude Squad

by smtg-ai - A terminal app

Launch

About security-and-hardening

S

security-and-hardening

Hardens code against vulnerabilities

security-and-hardening is an agent skill from Addy Osmani's agent-skills collection that brings security-first practices to web application development. It asks the agent to treat every external input as hostile, every secret as sacred, and every authorization check as mandatory. Security is framed as a constraint on every line of code that touches user data, authentication or external systems, rather than a phase at the end of a project. The skill's process starts with a threat model. Controls added without one are described as guesses, so before hardening, the agent is asked to spend a few minutes thinking like an attacker. The skill applies when building anything that accepts user input, implementing authentication or authorization, storing or transmitting sensitive data, integrating with external APIs or services, adding file uploads, webhooks or callbacks, and handling payment or personal data. It is listed on skills.sh, with its security audit results shown there. The skill is a guide for how an agent should write code, not an audit tool, and it suits developers and agents who build features that handle user data and want the security reasoning built in from the start.

Price
Free
Made by
addyosmani
Category
AI Skills
Website
github.com/addyosmani/agent-skills/security-and-hardening