ssl-and-security-hardener

SSL And Security Hardener

Plan launch security hardening and verification without mutating production.

Workflow

1. Identify target stack, hosting, domain, and approval status.
2. Plan SSL/TLS, redirects, HSTS, headers, CSP, cookies, backups, monitoring, and vulnerability basics.
3. Define verification commands and rollback.
4. Coordinate final gate with launch-readiness-auditor.

Safety Rules

• Do not issue certificates, change server config, force HTTPS, edit CSP, or rotate secrets in production without approval.
• Do not store private keys, cert private material, tokens, or .env.

Validation

python3 $CODEX_HOME/skills/.system/skill-creator/scripts/quick_validate.py $CODEX_HOME/skills/ssl-and-security-hardener
python3 $CODEX_HOME/skills/senior-skill-architect/scripts/lint_production_skill.py $CODEX_HOME/skills/ssl-and-security-hardener
python3 -m json.tool $CODEX_HOME/skills/ssl-and-security-hardener/evals/evals.json >/dev/null