Security Scanning Security Hardening

This is a multi-phase orchestration workflow that coordinates specialized security agents to scan, harden, and validate your entire stack. It runs SAST/DAST scanning, threat modeling with STRIDE, then systematically remediates vulnerabilities across backend, frontend, and mobile layers while implementing controls like WAF rules, secrets management, and zero-trust architecture. You'd use this when you need a comprehensive security program, not just a quick scan. The approach is thorough but heavy, cycling through vulnerability assessment, remediation, control implementation, and pen testing across four distinct phases. It's overkill for a simple audit but makes sense if you're establishing defense-in-depth controls across application, infrastructure, and CI/CD pipelines with proper authorization and rollback plans in place.

skills.sh installs: 507
GitHub stars: 43.1K
last updated: Jul 14, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill security-scanning-security-hardening --agent claude-code

Installs into .claude/skills of the current project.

Files

Implement comprehensive security hardening with defense-in-depth strategy through coordinated multi-agent orchestration:

[Extended thinking: This workflow implements a defense-in-depth security strategy across all application layers. It coordinates specialized security agents to perform comprehensive assessments, implement layered security controls, and establish continuous security monitoring. The approach follows modern DevSecOps principles with shift-left security, automated scanning, and compliance validation. Each phase builds upon previous findings to create a resilient security posture that addresses both current vulnerabilities and future threats.]