/security--env-hardening

/security--env-hardening is a Claude Code skill in the Code section. Reviews .env files, server settings and HTTP security headers, then generates a hardened configuration with a before and after comparison.

Author's description

Review and harden environment configuration and HTTP security headers

How to ask for it

/security--env-hardening review my production server configuration
/security--env-hardening is my API missing security headers?
/security--env-hardening harden environment variables before we ship

Install

curl -fsSL https://raw.githubusercontent.com/sgomez-dev/claude-skills/main/install.sh | bash

After installing with the script, type /security--env-hardening. Using Cursor, Windsurf or Codex? Platform guides

Demo coming soon

Pairs well with

/security--secrets-scanLeaked secrets scan
Scans your code, config files and recent git history for API keys, tokens, passwords and private keys, and explains how to remediate each.
Built here
/security--dependency-vulnDependency vulnerability check
Runs your package manager's audit and lists each vulnerable dependency with its CVE, severity, fixed version and a remediation plan.
Built here
/security--security-auditOWASP security audit
Audits your codebase against the OWASP Top 10 and returns each finding with severity, file and line, a description and a fix.
Built here
/security--auth-reviewLogin and permissions review
Reviews your app's login, sessions, tokens and access rules and returns severity-rated findings, each with a specific fix.
Built here
/security--sanitizeInput sanitization review
Traces where user input enters your code and where it ends up, flags SQL injection, XSS and similar flaws, and proposes the fix.
Built here
/security--cors-reviewCORS configuration review
Reviews your CORS setup in Express, FastAPI, Django or Nginx, tightens overly permissive origins and headers, and verifies them with curl.
Built here

Recipe: /pipeline--security-hardening Security Hardening

/security--pentest-prepPentest preparation
Prepares you for a penetration test: sweeps for easy fixes, documents the scope and delivers a pentest-prep.md with a checklist and known risks.
Built here
/security--rate-limitingRate limiting design
Designs and adds rate limiting: picks an algorithm, sets per-route budgets, returns 429 with Retry-After and adds tests.
Built here
/security--threat-modelSTRIDE threat model
Analyzes your repo's architecture and writes threat-model.md with a data-flow diagram, rated STRIDE threats and a top-5 action list.
Built here
/testing--contract-testingContract tests between services
Sets up consumer-driven contract tests (Pact by default) so breakages between services are caught at build time without running both together.
Built here
/testing--load-testingLoad testing setup
Sets up load tests with k6, Locust or Artillery: realistic scenarios, pass/fail thresholds and a lightweight smoke gate in CI.
Built here
/testing--mutation-testingMutation testing setup
Sets up mutation testing to measure whether your tests would catch real bugs, then turns surviving mutants into stronger tests.
Built here

How to ask for it

Install

Pairs well with

More from this section