Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Get Started Free →

Security Scanning Security Hardening · dokhacgiakhoa | DecimalAI

securityby dokhacgiakhoa

Security Scanning Security Hardening

dokhacgiakhoa/security-scanning-security-hardening

Source dokhacgiakhoa/agent-skills-4-vibe-coding-cli ↗License NOASSERTION

Coordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.

SkillScore74Maintained

Automatic

Security & AppSec pack

Last verified 8/29/2026

What it changes

Passed 17 of 23 test cases with the skill, and 14 of 23 without it.

Without skill61%

With skill74%

Checks it passed that the model alone missed

Recommends establishing rollback plans prior to applying hardening remediations.
Implements multi-factor authentication (MFA) enforcement for privileged user accounts.
Requires secrets management and authentication enhancements as core backend remediation steps.

and 3 more in the full report

5 fixed12 passed either way4 still failing2 broke

Pass-rate lift: +13 pp
Tokens: +33%
Agent turns: 0%
Response time: +12%

Model gemini-3.6-flashMeasured 8/29/2026v117 of 23 cases passed with skill

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/dokhacgiakhoa-security-scanning-security-hardening/SKILL.md https://app.decimal.ai/s/dokhacgiakhoa-security-scanning-security-hardening/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add dokhacgiakhoa-security-scanning-security-hardening, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/dokhacgiakhoa-security-scanning-security-hardening/ and pins it in .decimal/skills.lock

decimalai skills add dokhacgiakhoa-security-scanning-security-hardening

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/dokhacgiakhoa-security-scanning-security-hardening/SKILL.md https://app.decimal.ai/s/dokhacgiakhoa-security-scanning-security-hardening/SKILL.md

Raw file: /s/dokhacgiakhoa-security-scanning-security-hardening/SKILL.md ↗ · machine-readable summary at /s/dokhacgiakhoa-security-scanning-security-hardening.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 5

Prompt

Can you provide a structured end-to-end security program framework for our engineering team? We want to establish robust security safeguards across our code repositories, hosting environments, and access mechanisms while verifying compliance. Present the output as a phase-by-phase execution guide detailing baseline threat analysis, layered fixes, penetration testing, and compliance checks.

What was checked, without and with the skill
Checked	Without skill	With skill
Recommends establishing rollback plans prior to applying hardening remediations.	Missed	Passed
Structures the workflow into distinct sequential phases covering baseline assessment, remediation, validation, and compliance.	Passed	Passed
Incorporates multi-layer domain coverage across application code, authentication, infrastructure controls, and monitoring integration.	Passed	Passed

case-01 · gemini-3.6-flash · 8/29/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md45 linessingle file

Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi-agent orchestration:

[Extended thinking: This workflow implements a defense-in-depth security strategy across all application layers. It coordinates specialized security agents to perform comprehensive assessments, implement layered security controls, and establish continuous security monitoring. The approach follows modern DevSecOps principles with shift-left security, automated scanning, and compliance validation. Each phase builds upon previous findings to create a resilient security posture that addresses both current vulnerabilities and future threats.]

Use this skill when

Running a coordinated security hardening program
Establishing defense-in-depth controls across app, infra, and CI/CD
Prioritizing remediation from scans and threat modeling

Do not use this skill when

You only need a quick scan without remediation work
You lack authorization for security testing or changes
The environment cannot tolerate invasive security controls

Instructions

Execute Phase 1 to establish a security baseline.
Apply Phase 2 remediations for high-risk issues.
Implement Phase 3 controls and validate defenses.
Complete Phase 4 validation and compliance checks.

Safety

Avoid intrusive testing in production without approval.
Ensure rollback plans exist before hardening changes.

Phase 1: Comprehensive Security Assessment

🧠 Knowledge Modules (Fractal Skills)

1. 1. Initial Vulnerability Scanning

2. 2. Threat Modeling and Risk Analysis

3. 3. Architecture Security Review

4. 4. Critical Vulnerability Fixes

5. 5. Backend Security Hardening

6. 6. Frontend Security Implementation

7. 7. Mobile Security Hardening

8. 8. Authentication and Authorization Enhancement

Track record

Benchmark

17 / 23

test cases passed, vs 14 / 23 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/10/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

dokhacgiakhoa / agent-skills-4-vibe-coding-cli

.agent/skills/security-scanning-security-hardening/SKILL.md

View on GitHub ↗

License NOASSERTIONImported 8/10/2026Version v1

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

sickn33/security-scanning-security-hardeningCoordinate multi-layer security scanning and hardening across application, infrastructure, and compliance controls.Close match+18 pp pass-rate lift

More skills from the same source and nearby in the registry, with their headline benchmark lift.