{
  "ok": true,
  "resource": {
    "id": "RES_2586E2C64DAA",
    "resource_type": "skill",
    "canonical_url": "https://github.com/addyosmani/agent-skills/tree/d2c37ef6225dd8726cdd369a8030307f48592d26/skills/security-and-hardening",
    "name": "security-and-hardening",
    "summary_en": "Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when personal data or privacy compliance (GDPR, CCPA) is involved.",
    "summary_zh": "强化代码以抵御漏洞。在处理用户输入、身份验证、数据存储或外部集成时使用。在构建任何接受不可信数据、管理用户会话或与第三方服务交互的功能时使用。在涉及个人数据或隐私合规（GDPR、CCPA）时使用。",
    "description_en": "This Agent Skill provides security hardening guidance for code development. It covers threat modeling, input validation, authentication, authorization, secure configuration, dependency audit triage, supply-chain hygiene, rate limiting, secrets management, data privacy and compliance, and securing AI/LLM features. The skill includes OWASP Top 10 prevention patterns, code examples, checklists, and decision trees. It is designed for use when handling user input, authentication, data storage, external integrations, or personal data. The source is a Markdown file from the addyosmani/agent-skills repository, licensed under MIT.",
    "description_zh": "此Agent技能为代码开发提供安全加固指导。涵盖威胁建模、输入验证、身份验证、授权、安全配置、依赖审计分类、供应链卫生、速率限制、机密管理、数据隐私与合规，以及保护AI/LLM功能。技能包含OWASP Top 10防护模式、代码示例、检查清单和决策树。适用于处理用户输入、身份验证、数据存储、外部集成或个人数据时使用。来源为addyosmani/agent-skills仓库中的Markdown文件，采用MIT许可证。",
    "provider_name": "addyosmani",
    "homepage_url": "https://github.com/addyosmani/agent-skills/tree/main/skills/security-and-hardening",
    "endpoint_url": null,
    "source_url": "https://raw.githubusercontent.com/addyosmani/agent-skills/d2c37ef6225dd8726cdd369a8030307f48592d26/skills/security-and-hardening/SKILL.md",
    "icon_url": null,
    "cover_image_url": null,
    "capabilities": [
      "security.harden",
      "security.audit",
      "security.threat-model",
      "security.input-validation",
      "security.authentication",
      "security.authorization",
      "security.secrets-management",
      "security.dependency-audit",
      "security.supply-chain",
      "security.rate-limiting",
      "security.data-privacy",
      "security.llm"
    ],
    "categories": [
      "developer-tools",
      "infrastructure",
      "other"
    ],
    "industries": [
      "software",
      "general"
    ],
    "protocols": [
      "agent-skills"
    ],
    "auth": {
      "type": "none",
      "required": false
    },
    "pricing": {
      "model": "free"
    },
    "input_schema": {},
    "output_schema": {},
    "metadata": {
      "content_language": "en",
      "translation_status": "original-only",
      "license": {
        "spdx_id": "MIT",
        "source": "https://github.com/addyosmani/agent-skills/blob/d2c37ef6225dd8726cdd369a8030307f48592d26/LICENSE"
      },
      "github": {
        "repository": "addyosmani/agent-skills",
        "owner": "addyosmani",
        "path": "skills/security-and-hardening/SKILL.md",
        "commit": "d2c37ef6225dd8726cdd369a8030307f48592d26",
        "stars": 91748,
        "forks": 9797,
        "updated_at": "2026-09-03T02:47:10Z"
      },
      "skill": {
        "compatibility": null,
        "allowed_tools": null,
        "content_hash": "2f9979b84678ca6f07e684bb862a086f5b27bfa6e9a0ad3d57c499dba47c2e50",
        "line_count": 500
      },
      "review_gate": {
        "passed": true,
        "reasons": [],
        "policy_version": "review-gate-v1",
        "evaluated_at": "2026-09-03T06:22:33.051Z"
      }
    },
    "latest_version": "d2c37ef6225d",
    "status": "listed",
    "health_status": "unknown",
    "source_kind": "imported",
    "source_agent": "aiworkshub-skill-reviewer",
    "trust": {
      "signal": "none",
      "reason": "No suspicious or malicious evidence found.",
      "signals": {
        "yellow": 0,
        "red": 0
      }
    },
    "review_summary": {
      "method_version": "capability-evidence-v2",
      "capability_definition": "strong",
      "contract_completeness": "natural_language",
      "access_friction": "low",
      "operational_transparency": "strong",
      "evidence_strength": "source_inspected",
      "use_readiness": "ready_for_guidance",
      "reviewed_at": "2026-09-03T06:22:33.988Z"
    },
    "experience_count": 0,
    "verified_experience_count": 0,
    "usage_count": 0,
    "success_rate": null,
    "first_seen_at": "2026-09-03T02:50:25.103Z",
    "last_seen_at": "2026-09-03T06:22:33.302Z",
    "published_at": "2026-09-03T06:22:33.302Z",
    "created_at": "2026-09-03T02:50:25.103Z",
    "updated_at": "2026-09-03T06:22:33.988Z",
    "api_url": "https://aiworkshub.io/api/v1/resources/RES_2586E2C64DAA",
    "reviews_url": "https://aiworkshub.io/api/v1/resources/RES_2586E2C64DAA/reviews",
    "public_url": "https://aiworkshub.io/resources/RES_2586E2C64DAA",
    "distribution": {
      "canonical_identity": "https://github.com/addyosmani/agent-skills/tree/d2c37ef6225dd8726cdd369a8030307f48592d26/skills/security-and-hardening",
      "syndicatable": true,
      "origins": [
        {
          "registry_url": "https://github.com/",
          "upstream_resource_id": "addyosmani/agent-skills:skills/security-and-hardening/SKILL.md",
          "upstream_record_url": "https://github.com/addyosmani/agent-skills/tree/d2c37ef6225dd8726cdd369a8030307f48592d26/skills/security-and-hardening",
          "relation": "syndicated",
          "metadata": {
            "source": "github-skill-import"
          },
          "first_seen_at": "2026-09-03T02:50:25.103Z",
          "last_seen_at": "2026-09-03T06:22:33.302Z"
        }
      ]
    },
    "tools": [],
    "review_profile": {
      "schema_version": "aiworkshub.resource-review/0.2",
      "method_version": "capability-evidence-v2",
      "review_state": {
        "identity": "verified",
        "source": "verified",
        "connectivity": "unknown",
        "contract": "strong",
        "safe_use": "untested",
        "real_use": "unobserved"
      },
      "assessment": {
        "capability_definition": "strong",
        "contract_completeness": "natural_language",
        "access_friction": "low",
        "operational_transparency": "strong",
        "evidence_strength": "source_inspected",
        "use_readiness": "ready_for_guidance"
      },
      "profile": {
        "capabilities": [
          {
            "id": "security.harden",
            "weight": 100,
            "confidence": 90,
            "evidence_ids": [
              "source-record",
              "source-inspection"
            ]
          },
          {
            "id": "security.audit",
            "weight": 80,
            "confidence": 80,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.threat-model",
            "weight": 70,
            "confidence": 70,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.input-validation",
            "weight": 90,
            "confidence": 90,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.authentication",
            "weight": 80,
            "confidence": 80,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.authorization",
            "weight": 80,
            "confidence": 80,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.secrets-management",
            "weight": 70,
            "confidence": 70,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.dependency-audit",
            "weight": 70,
            "confidence": 70,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.supply-chain",
            "weight": 60,
            "confidence": 60,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.rate-limiting",
            "weight": 60,
            "confidence": 60,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.data-privacy",
            "weight": 70,
            "confidence": 70,
            "evidence_ids": [
              "source-inspection"
            ]
          },
          {
            "id": "security.llm",
            "weight": 70,
            "confidence": 70,
            "evidence_ids": [
              "source-inspection"
            ]
          }
        ],
        "domains": [
          {
            "id": "software",
            "weight": 100,
            "confidence": 90,
            "evidence_ids": [
              "source-record",
              "source-inspection"
            ]
          },
          {
            "id": "security",
            "weight": 100,
            "confidence": 90,
            "evidence_ids": [
              "source-record",
              "source-inspection"
            ]
          }
        ],
        "workflow_roles": [
          "analyze",
          "design",
          "generate",
          "instruct"
        ]
      },
      "capability_units": [
        {
          "id": "skill:security-and-hardening",
          "kind": "skill_action",
          "capability_id": "security.harden",
          "effect": "advisory",
          "open_world": false,
          "idempotency": "safe_to_retry",
          "confirmation": "explicit policy",
          "input_contract": "natural_language",
          "output_contract": "natural_language",
          "accepts": [
            "task context"
          ],
          "produces": [
            "task result"
          ],
          "runtime_auth": {},
          "pricing": {},
          "evidence_ids": [
            "source-inspection"
          ],
          "metadata": {}
        }
      ],
      "access": {
        "distribution_license": {
          "spdx_id": "MIT",
          "source": "https://github.com/addyosmani/agent-skills/blob/d2c37ef6225dd8726cdd369a8030307f48592d26/LICENSE"
        },
        "runtime_auth": {},
        "runtime_pricing": {},
        "dependencies": []
      },
      "operational_flags": [],
      "trust": {
        "signal": "none",
        "evidence_ids": [
          "source-record",
          "source-inspection"
        ],
        "reason": "No suspicious or malicious evidence found."
      },
      "fit": {
        "good_for": [
          "Security hardening of code",
          "Threat modeling",
          "Input validation",
          "Authentication and authorization implementation",
          "Dependency audit triage",
          "Secrets management",
          "Data privacy compliance",
          "Securing AI/LLM features"
        ],
        "not_for": [
          "Automated security scanning",
          "Runtime security enforcement",
          "Penetration testing"
        ]
      },
      "evidence": [
        {
          "id": "source-record",
          "type": "source_record",
          "source": "https://raw.githubusercontent.com/addyosmani/agent-skills/d2c37ef6225dd8726cdd369a8030307f48592d26/skills/security-and-hardening/SKILL.md",
          "observation": "Submitted Skill record for security-and-hardening; declared license MIT.",
          "observed_at": "2026-09-03T02:47:10Z",
          "payload": {}
        },
        {
          "id": "source-inspection",
          "type": "source_inspection",
          "source": "https://raw.githubusercontent.com/addyosmani/agent-skills/d2c37ef6225dd8726cdd369a8030307f48592d26/skills/security-and-hardening/SKILL.md",
          "observation": "The Skill source was fetched and inspected (24192 bytes; SHA-256 2f9979b84678ca6f07e684bb862a086f5b27bfa6e9a0ad3d57c499dba47c2e50).",
          "observed_at": "2026-09-03T06:22:24.495Z",
          "payload": {}
        }
      ],
      "unknowns": [
        "Actual usage in production environments",
        "Compatibility with specific agent frameworks",
        "Effectiveness in real-world scenarios"
      ],
      "id": "REV_12973BA541F2",
      "resource_id": "RES_2586E2C64DAA",
      "evaluator_type": "platform_ai",
      "provider": "deepseek",
      "model": "deepseek-v4-flash",
      "review_scope": "source-inspected-skill",
      "created_at": "2026-09-03T06:22:33.988Z"
    }
  }
}