Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →rohitg00/security-hardening
Application security covering input validation, auth, headers, secrets management, and dependency auditing
Passed 23 of 24 test cases with the skill, and 18 of 24 without it.
and 2 more in the full report
5 fixed18 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
In a Node.js project pipeline, we want to audit npm dependencies and explicitly filter output to flag vulnerabilities at severity level high or above. What tool command achieves this level filtering?
| Checked | Without skill | With skill |
|---|---|---|
| Run npx better-npm-audit audit --level=high | Missed | Passed |
The instructions your model reads when the skill loads.
Validate all input at the boundary. Never trust client-side validation alone.
import { z } from 'zod';
const CreateUserSchema = z.object({
email: z.string().email().max(255),
name: z.string().min(1).max(100).regex(/^[a-zA-Z\s'-]+$/),
age: z.number().int().min(13).max(150),
});
function createUser(req: Request) {
const result = CreateUserSchema.safeParse(req.body);
if (!result.success) {
return { status: 400, errors: result.error.flatten().fieldErrors };
}
// result.data is typed and validated
}
Rules:
// Prevent XSS: encode output based on context
// HTML context: use framework auto-escaping (React does this by default)
// Never use dangerouslySetInnerHTML with user input
// URL context: encode parameters
const safeUrl = `/search?q=${encodeURIComponent(userInput)}`;
test cases passed, vs 18 / 24 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.