Skip to content
security-and-hardening

Self-hosted alternatives to security-and-hardening

5 self-hosted AI Skills apps to use instead, best rated first.

Top picks

  1. C

    claude-to-deerflow

    Get

    claude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code

    Self-hosted

  2. O

    open-notebook

    Get

    open-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O

    Self-hosted

  3. R

    Reactive Resume

    Get

    Reactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish

    Open sourceSelf-hosted

  4. S

    self-hosted-funnel-launch

    Get

    Self-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a

    Self-hosted

  5. G

    get-convex/convex-backend

    Get

    Convex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca

    Self-hosted

About security-and-hardening

S

security-and-hardening

Hardens code against vulnerabilities

security-and-hardening is an agent skill from Addy Osmani's agent-skills collection that brings security-first practices to web application development. It asks the agent to treat every external input as hostile, every secret as sacred, and every authorization check as mandatory. Security is framed as a constraint on every line of code that touches user data, authentication or external systems, rather than a phase at the end of a project. The skill's process starts with a threat model. Controls added without one are described as guesses, so before hardening, the agent is asked to spend a few minutes thinking like an attacker. The skill applies when building anything that accepts user input, implementing authentication or authorization, storing or transmitting sensitive data, integrating with external APIs or services, adding file uploads, webhooks or callbacks, and handling payment or personal data. It is listed on skills.sh, with its security audit results shown there. The skill is a guide for how an agent should write code, not an audit tool, and it suits developers and agents who build features that handle user data and want the security reasoning built in from the start.

Price
Free
Made by
addyosmani
Category
AI Skills
Website
github.com/addyosmani/agent-skills/security-and-hardening