domains / families / security / laravel-security-audit

laravel-security-audit

authentic

Security auditor for Laravel applications. Analyzes code for vulnerabilities, misconfigurations, and insecure practices using OWASP standards and Laravel security best practices.

When to use

• Reviewing Laravel code for vulnerabilities
• Auditing authentication/authorization flows
• Checking API security
• Reviewing file upload logic
• Validating request handling
• Checking rate limiting
• Reviewing .env exposure risks
• Evaluating deployment security posture

When not to use

• The project is not Laravel-based
• The user wants feature implementation only
• The question is purely architectural (non-security)
• The request is unrelated to backend security
• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Skill page

Source