Skill Marketplace

Finds hardcoded API keys, tokens, and passwords in your code and moves them to environment variables.

Adds a Dependabot config to automatically get PRs for outdated or vulnerable dependencies.

Pins all GitHub Actions to exact commit SHAs instead of mutable tags like v1 or latest.

Adds a GitHub Actions workflow that runs your test suite on every push and PR.

Adds httpOnly, secure, and sameSite flags to your session cookies to prevent theft.

Logs who did what and when — essential for debugging, compliance, and customer trust.

Creates a basic privacy policy page tailored to what your app actually does.