security-checklist
Reference document for monopoly security-checklist.
Profile →npx skills add sickn33/agentic-awesome-skills --skill security-checklist --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# MONOPOLY — Security Hardening Checklist ## When to Use - Use this skill when the task matches this description: Reference document for monopoly security-checklist. ## Network Security - [ ] All services inside private VPC; only LB/API GW exposed publicly - [ ] Security groups follow least-privilege (deny all, allow specific ports/CIDRs) - [ ] NACLs as secondary defense layer - [ ] WAF enabled with OWASP top 10 ruleset - [ ] DDoS protection (Cloudflare / AWS Shield Standard minimum) - [ ] VPN or Private Link for inter-service communication in multi-region ## Authentication & Authorization - [ ] JWT tokens with short expiry (15 min access, 7 day refresh) - [ ] OAuth 2.0 / OIDC for third-party auth - [ ] MFA enforced for admin accounts - [ ] RBAC or ABAC for authorization - [ ] No secrets in JWT payload (use opaque references) - [ ] Token revocation strategy (Redis blocklist or short TTL) ## API Security - [ ] Rate limiting at API gateway (per user, per IP, per endpoint) - [ ] Input validation and sanitization on all endpoints - [ ] SQL injection prevention (parameterized queries, ORM) - [ ] XSS prevention (output encoding, CSP headers) - [ ] CSRF protection (SameSite cookies, CSRF
- When to Use
- Network Security
- Authentication & Authorization
- API Security
- Data Security
- Secrets Management
- Supply Chain & Dependencies
- Incident Response
- Compliance (as applicable)
- Limitations
What does the security-checklist skill do?
Reference document for monopoly security-checklist.
How do I install it?
Run `npx skills add sickn33/agentic-awesome-skills --skill security-checklist --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From sickn33/agentic-awesome-skills, a repository with 44,414 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.