Security Hardening Checklist
P0/P1/P2 hardening with verification: every item names the attack it prevents and the command to verify.
by Kenji Yoshida5.0(2)689 installs
About this skill
What's inside
SKILL.mdwith priority-tiered hardening (P0 today / P1 this week / P2 this quarter) across access, exposure, apps, containers, and cloud- A verification report format with pass/FAIL evidence
references/headers-and-tls.md— copy-paste security header sets, nginx/Express configs, and outside-in verification commands
Use case
Security skills convert "we should be more secure" into a finite, verifiable list. Defensive only — each item explains the attack it stops, so teams can prioritize by real risk instead of checkbox count.
Versions
v2.2.0Add container image-digest pinning; CSP report-only rollout path7/20/2026Reviews
5.0(1)Perfect scope for a skillPromptLabs Studio · 7/20/2026
It refuses offensive requests and stays laser-focused on defense. Exactly what we can hand juniors.
5.0(1)The verify commands make it realDataForge Labs · 7/20/2026
Ran the P0 tier on a new VPS: two FAILs found in ten minutes, both with the fix inline.