Does it support cloud-native secrets management?

Absolutely. It provides ready-to-use patterns for AWS Secrets Manager and HashiCorp Vault to ensure API keys and credentials never leak into source code.

What encryption standards are supported?

The skill utilizes AES-256-GCM for robust authenticated encryption, including secure IV generation and authorization tag handling for data integrity.

What are F5 Quality Gates?

F5 Quality Gates (G4 and G5) are validation steps that force a security audit and hardening verification before a project can be marked as production-ready.

How does this skill help with security headers?

It provides pre-configured templates and implementation patterns for tools like Helmet.js to enforce CSP, HSTS, and Referrer-Policy with zero manual configuration errors.

Can I use this for compliance audits?

Yes, it includes built-in checklists for GDPR and PCI-DSS, along with quality gates that verify if your code meets specific hardening benchmarks.

Security Infrastructure

Name: Security Infrastructure
Author: Fujigo-Software

byFujigo-Software

•

Security & Testing

Hardens application infrastructure through security headers, encryption standards, and regulatory compliance enforcement.

The Security Infrastructure skill provides a comprehensive toolkit for securing modern web applications at the architectural level. It automates the configuration of essential security headers like CSP and HSTS via Helmet.js, implements robust AES-256-GCM encryption patterns for sensitive data, and integrates secrets management workflows using AWS or HashiCorp Vault. By aligning with GDPR and PCI-DSS requirements and enforcing F5 Quality Gates, this skill ensures that your production environments meet rigorous hardening standards and pass security audits.

Key Features

01Automated security header configuration (CSP, CORS, HSTS, XSS protection)

02Standardized AES-256-GCM encryption and decryption implementations

03Secure secrets management integration for AWS and HashiCorp Vault

04Comprehensive GDPR and PCI-DSS compliance checklists

05Production hardening verification via G4/G5 Quality Gates

0617 GitHub stars

Use Cases

01Hardening Node.js applications against common web vulnerabilities and clickjacking

02Implementing industry-standard data encryption at rest and in transit

03Automating infrastructure compliance audits for regulated environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fujigo-software/f5-framework-claude security-infra

For use in Claude.ai and ChatGPT

Download Skill