Laravel Security

This is a thorough security reference that covers the entire Laravel attack surface, from CSRF and mass assignment to rate limiting and signed URLs. You'll want it active when building auth flows, handling file uploads, or hardening APIs for production. It's opinionated in the right ways: encrypted casts for sensitive data, strict Form Request validation, policy middleware on routes, and practical rate limiting by both IP and email. The code examples are production-ready, not toy demos. If you're moving fast and need to know whether you've missed something obvious like SESSION_SECURE_COOKIE or wildcard CORS origins, this catches it.

Install to Claude Code

npx -y skills add affaan-m/everything-claude-code --skill laravel-security --agent claude-code