epic-security

Apply CSP, rate limiting, honeypots, and secure headers to Epic Stack deployments.

Updated Jan 29, 2026
One-click install
npx skills add https://github.com/walbuc/iac-sorteios --skill epic-security-walbuc
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: epic-security
Source: https://github.com/walbuc/iac-sorteios/tree/main/docs/skills/epic-security
Command: npx skills add https://github.com/walbuc/iac-sorteios --skill epic-security-walbuc

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security for Epic Stack apps is often overlooked, leaving surfaces exposed to CSP, rate limiting, session, and header-related risks. This guide consolidates proven security practices into a practical, repeatable approach.

Core Features & Use Cases

  • Centralized CSP configuration and enforcement across server and client boundaries.
  • Rate limiting, honeypot-based anti-spam, and secure headers to protect sensitive routes.
  • Secure session management and secret handling aligned with Epic Stack patterns.

Quick Start

Configure CSP, rate limiting, and secure headers for Epic Stack deployments.

Frequently Asked Questions about epic-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure CSP and secure headers for Epic Stack apps?▼

To configure CSP and secure headers for Epic Stack apps, you apply centralized Content Security Policy rules across server and client boundaries. This guide uses helmet-based headers to enforce protections and secure frontend routes in real-world deployments.

What is the best way to implement rate limiting and session security in Epic Stack?▼

The best way to implement rate limiting and session security in Epic Stack involves enforcing fail-fast validation and using httpOnly cookies. This approach protects sensitive backend routes and guards against common session-related threats.

How do honeypots work for anti-spam protection in Epic Stack deployments?▼

Honeypots for anti-spam protection in Epic Stack deployments work by integrating hidden fields to detect bots. This Skill applies honeypot-based anti-spam alongside rate limiting to prevent automated attacks on your web apps.

Does Epic Stack support environment-driven secret management?▼

Yes, Epic Stack supports environment-driven secret management to guard against common threats. This Skill enforces patterns for secure session management and secret handling aligned with native Epic Stack environment configurations.

Can I use fail-fast validation to protect API routes in an Epic Stack application?▼

Yes, you can use fail-fast validation to protect API routes in an Epic Stack application. This Skill applies fail-fast validation patterns alongside secure headers and rate limiting to protect sensitive backend routes from common threats.