security-hardener

What problem does it solve?

Proactively enforce and validate the security posture of the SYNTHEX platform to prevent deployment blockers, secret leaks, misconfigured headers, missing rate limits, and dependency vulnerabilities that could lead to production incidents.

Core Features & Use Cases

• Critical build checks: verify next.config.mjs settings and ensure TypeScript passes with noEmit to block unsafe builds.
• Secret and JWT safety: scan for hardcoded secrets, insecure fallbacks, and unsafe jwt casts.
• HTTP security and rate limiting: validate CSP and other security headers, cookie flags, CORS, and rate limiting on auth endpoints.
• Dependency and hygiene audits: run dependency vulnerability checks and surface error response leakage.
• Use Case: run as a pre-deploy gate in CI or invoke on-demand during security reviews to produce a PASS/BLOCKED verdict and actionable file-level fixes.

Quick Start

Use the security-hardener skill to run a full security posture scan of the repository and produce a deployment verdict with actionable remediation suggestions.