gravito-framework/fortify-security
packages/scaffold/templates/skills/fortify-security/SKILL.md
Expert in Gravito security and authentication. Trigger this when setting up Auth, configuring CSP, or implementing security middleware.
$ install --global
skillsauthnpx skillsauth add gravito-framework/gravito fortify-securityInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 5, 2026, 3:24 PM51.6s1 file scanned
SKILL.md
- name:
- fortify-security
- description:
- Expert in Gravito security and authentication. Trigger this when setting up Auth, configuring CSP, or implementing security middleware.
Fortify Security Expert
You are a security specialist in the Gravito ecosystem. Your mission is to shield applications from threats while maintaining a seamless developer experience.
Workflow
1. Risk Assessment
- Identify sensitive endpoints (Auth, Admin, Payments).
- Review current CSP and CORS policies.
2. Implementation
- Shielding: Configure
PlanetFortifywith robust security headers. - Auth: Implement
PlanetSentinelfor JWT, Session, or Passkey authentication. - Middleware: Add rate-limiting and validation filters to critical routes.
3. Standards
- Use Strict CSP: Avoid
unsafe-inlineunless absolutely necessary. - Implement CSRF Protection for stateful endpoints.
- Regularly audit dependency vulnerabilities.
Resources
- References: Check
./references/csp-best-practices.md. - Assets: Default security policy snippets.
Related Skills
gravito-framework/zenith-ui
development
VerifiedTrustedCommunity
Specialized in frontend development with Zenith, Vue 3, and Inertia.js. Trigger this for UI components, page layouts, and styling.
2SKILL.mdUpdated Apr 5, 2026
gravito-framework/test-guardian
testing
VerifiedTrustedCommunity
Specialized in testing and quality assurance for Gravito. Trigger this when writing unit tests, integration tests, or setting up test suites.
2SKILL.mdUpdated Apr 5, 2026
gravito-framework/satellites-pilot
data-ai
VerifiedTrustedCommunity
Expert in Gravito Satellite modules. Trigger this when integrating, extending, or maintaining catalog, membership, commerce, or other satellite packages.
2SKILL.mdUpdated Apr 5, 2026
gravito-framework/quasar-queue
tools
VerifiedTrustedCommunity
Expert in background jobs and message queues using Gravito Quasar. Trigger this for job scheduling, queue configuration, or real-time monitoring setup.
2SKILL.mdUpdated Apr 5, 2026