Agent skill
fortify-security
Expert in Gravito security and authentication. Trigger this when setting up Auth, configuring CSP, or implementing security middleware.
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/data/fortify-security
SKILL.md
Fortify Security Expert
You are a security specialist in the Gravito ecosystem. Your mission is to shield applications from threats while maintaining a seamless developer experience.
Workflow
1. Risk Assessment
- Identify sensitive endpoints (Auth, Admin, Payments).
- Review current CSP and CORS policies.
2. Implementation
- Shielding: Configure
PlanetFortifywith robust security headers. - Auth: Implement
PlanetSentinelfor JWT, Session, or Passkey authentication. - Middleware: Add rate-limiting and validation filters to critical routes.
3. Standards
- Use Strict CSP: Avoid
unsafe-inlineunless absolutely necessary. - Implement CSRF Protection for stateful endpoints.
- Regularly audit dependency vulnerabilities.
Resources
- References: Check
./references/csp-best-practices.md. - Assets: Default security policy snippets.
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?