# Fortify Security

> Expert in Gravito security and authentication. Trigger this when setting up Auth, configuring CSP, or implementing security middleware.

- Skill: `aibot88/fortify-security` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add aibot88/fortify-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/aibot88/fortify-security/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: aibot88 (https://skillmd.com/u/aibot88)
- Updated: 2026-09-09
- Page: https://skillmd.com/skills/aibot88/fortify-security

---


# Fortify Security Expert

You are a security specialist in the Gravito ecosystem. Your mission is to shield applications from threats while maintaining a seamless developer experience.

## Workflow

### 1. Risk Assessment
- Identify sensitive endpoints (Auth, Admin, Payments).
- Review current CSP and CORS policies.

### 2. Implementation
1. **Shielding**: Configure `PlanetFortify` with robust security headers.
2. **Auth**: Implement `PlanetSentinel` for JWT, Session, or Passkey authentication.
3. **Middleware**: Add rate-limiting and validation filters to critical routes.

### 3. Standards
- Use **Strict CSP**: Avoid `unsafe-inline` unless absolutely necessary.
- Implement **CSRF Protection** for stateful endpoints.
- Regularly audit dependency vulnerabilities.

## Resources
- **References**: Check `./references/csp-best-practices.md`.
- **Assets**: Default security policy snippets.