Agent skill · security · affaan-m
laravel-security
Laravel security best practices — authentication, authorization, Eloquent safety, CSRF, XSS prevention, API security, and secure deployment configurations. Use when reviewing Laravel auth, Eloquent safety, CSRF, XSS, API security, or deployment configuration.
Why this skill is useful
Provides specific security configurations and best practices for Laravel applications that the AI wouldn't reliably generate on its own.
What it needs
About 8k tokens when loaded. Last updated 2026-08-06. 238,342 stars on the source repository.
What this skill does
Laravel Security Best Practices Comprehensive security guidelines for Laravel applications to protect against common vulnerabilities. When to Activate Setting up Laravel authentication and authorization (Sanctum, Passport, Jetstream, Breeze) Implementing user roles, permissions, and policies Configuring production security settings and environment variables Reviewing Laravel applications for security vulnerabilities Deploying Laravel applications to production Writing secure Eloquent queries and migrations Production Configuration Essential Production Settings Environment File Security HTTPS Enforcement Authentication Sanctum (API Token Authentication) Password Security Session Management Authorization Gates Policies Middleware Authorization Eloquent Security Mass Assignment Protection SQL Injection Prevention Attribute Casting Model Security CSRF Protection Default Protection Excluding Routes (Carefully) CSRF with JavaScript XSS Prevention Blade Templating Security Safe HTML Handling JavaScript Context Escaping HTTP Headers for XSS Protection Input Validation Form Request Validation Custom Validation Rules API Security Rate Limiting API Authentication — Sanctum vs Passport CORS Configuration `php // config/cors.php return [ 'paths' => ['api
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills affaan-m/laravel-security--825450