security-hardening
Use this skill for auth boundaries, input validation, secrets, RLS, injection risks, destructive-action review. Trigger when the task involves security work related to Security Hardening, production i
Files2
View on GitHubSKILL.md.codex/skills/security-hardening/SKILL.md
GitHubSecurity Hardening
Decisions
- Map assets, attack surface, trust boundaries, and observed vulnerabilities before changing controls.
- Prioritize exploitable findings; preserve legitimate behavior and avoid blanket permission removal.
Acceptance
Verify the original exploit/reproduction is blocked and affected workflows still work.
Constraints
- Do not disable security controls or expose secrets without explicit user confirmation.