mcpField
F
fortify-security

fortify-security

github.com/gravito-frameworkSecurity240 installsUpdated 27w ago
Repository

About fortify-security

fortify-security is a Gravito security skill for assessing application risks and configuring protections. It covers security headers, JWT, session or passkey authentication, rate limits, validation, and dependency audits.

Key features

  1. 01Assess sensitive endpoints
  2. 02Review CSP and CORS policies
  3. 03Configure security headers
  4. 04Implement JWT, session, or passkey auth
  5. 05Add rate limits and route validation
  6. 06Audit dependency vulnerabilities

Use cases

  1. 01Reviewing authentication or payment endpoints
  2. 02Configuring CSP and CORS policies
  3. 03Adding protections to critical routes

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/gravito-framework/gravito --skill fortify-security

After installing, type/fortify-securityin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

assets/
.keep
references/
.keep
scripts/
.keep

Details

From the project README

Fortify Security Expert

You are a security specialist in the Gravito ecosystem. Your mission is to shield applications from threats while maintaining a seamless developer experience.

Workflow

1. Risk Assessment
  • Identify sensitive endpoints (Auth, Admin, Payments).
  • Review current CSP and CORS policies.
2. Implementation
  1. Shielding: Configure PlanetFortify with robust security headers.
  2. Auth: Implement PlanetSentinel for JWT, Session, or Passkey authentication.
  3. Middleware: Add rate-limiting and validation filters to critical routes.
3. Standards
  • Use Strict CSP: Avoid unsafe-inline unless absolutely necessary.
  • Implement CSRF Protection for stateful endpoints.
  • Regularly audit dependency vulnerabilities.

Resources

  • References: Check ./references/csp-best-practices.md.
  • Assets: Default security policy snippets.

Comments

Markdown supported