security-and-hardening

Applies security-first practices to harden web application code against vulnerabilities.

When to use it

Use when building features involving user input, access control, sensitive data, external services, uploads, payments, or PII.

It changes how the agent threat-models, hardens, and verifies security-relevant project code.

No additional actions listed in the analysis.