epic-security

What problem does it solve?

This Skill helps teams implement a cohesive security posture across Epic Stack applications, reducing misconfigurations and security debt by providing practical guidance on CSP, rate limiting, session security, and secure headers.

Core Features & Use Cases

• Content Security Policy (CSP) configuration and validation to prevent XSS and data leakage.
• Rate limiting strategies to protect public APIs and sensitive routes.
• Session security with httpOnly cookies, secure flags, and secret rotation.
• Input validation & sanitization using robust schemas to prevent injection attacks.
• Secure headers and best practices for privacy and protection.
• Secrets management guidelines and safe rotation practices。

Quick Start

Implement the core security patterns in a new Epic Stack project by enabling CSP headers, setting up session storage with httpOnly cookies, applying rate limits on critical routes, and validating inputs with standard schemas as outlined in this guide.