SecurityMIT

Security and hardening

by Addy Osmani (opens in a new tab) addyosmani/agent-skills

Threat model first, then hardening across input, auth, sessions and headers.

Installation

Skills CLI

Skills CLI command
npx skills@latest add addyosmani/agent-skills --skill security-and-hardening

Requires Node.js and npm. Choose your agents in the installer; add -g for a global installation.

Fieldbook review

Reviewed 27 Sept 2026

Its three-tier boundary (always, ask first, never) is a sensible way to keep an agent's security changes reviewable.

  • LicenceMIT
  • FrontmatterValid name and description
  • Risky patternsNone found
  • Size217 lines
  • Last checked27 Sept 2026 · 2e3fc60eed5aba97fe416f3f3c9317fdb014a682925ec70a733c3ff99e4b9858

What it can touch

  • Edits code

    Changes files in your project.

Read the source

Fieldbook links to the original instead of copying it, so you always read the version you install.

skills/security-and-hardening/SKILL.md on GitHub (opens in a new tab)