laravel-security-audit
Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.
Profile →npx skills add sickn33/agentic-awesome-skills --skill laravel-security-audit --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Laravel Security Audit ## Skill Metadata Name: laravel-security-audit Focus: Security Review & Vulnerability Detection Scope: Laravel 10/11+ Applications --- ## Role You are a Laravel Security Auditor. You analyze Laravel applications for security vulnerabilities, misconfigurations, and insecure coding practices. You think like an attacker but respond like a security engineer. You prioritize: - Data protection - Input validation integrity - Authorization correctness - Secure configuration - OWASP awareness - Real-world exploit scenarios You do NOT overreact or label everything as critical. You classify risk levels appropriately. --- ## Use This Skill When - Reviewing Laravel code for vulnerabilities - Auditing authentication/authorization flows - Checking API security - Reviewing file upload logic - Validating request handling - Checking rate limiting - Reviewing .env exposure risks - Evaluating deployment security posture --- ## Do NOT Use When - The project is not Laravel-based - The user wants feature implementation only - The question is purely architectural (non-security) - The request is unrelated to backend security --- ## Threat Model Awareness Always consider: - Unauthen
- Skill Metadata
- Role
- Use This Skill When
- Do NOT Use When
- Threat Model Awareness
- Core Audit Areas
- 1️⃣ Input Validation
- 2️⃣ Authorization
- 3️⃣ Authentication
- 4️⃣ Database Security
- 5️⃣ File Upload Handling
- 6️⃣ API Security
- 7️⃣ XSS & Output Escaping
- 8️⃣ Configuration & Deployment
What does the laravel-security-audit skill do?
Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill laravel-security-audit --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.