Skip to content
cccskills
FreePublished on GitHub

security-hardening

Perform security audits for the Adobe Dispatcher Apache HTTP Server module and Apache HTTPD in AEMaaCS cloud workflows only, with cloud-specific hardening verification.

The English summary is being prepared. Showing the original description.

See how to install

Files included (19)

  • SKILL.md4.1 KB
  • references/dispatcher-foundation/change-risk-and-rollback-template.md1016 B
  • references/dispatcher-foundation/cloud-service-aemaacs-guardrails.md10.3 KB
  • references/dispatcher-foundation/core-7-tools-reference.md4.4 KB
  • references/dispatcher-foundation/local-sdk-execution.md7.2 KB
  • references/dispatcher-foundation/mode-specific-verification-matrix.md4.1 KB
  • references/dispatcher-foundation/playbook-command-linkage.md7.9 KB
  • references/dispatcher-foundation/public-doc-citation-rules.md2.0 KB
  • references/dispatcher-foundation/public-docs-index.md8.0 KB
  • references/dispatcher-foundation/quick-start-execution-path.md3.4 KB
  • references/dispatcher-foundation/README.md483 B
  • references/dispatcher-foundation/repo-layout-workflows.md3.7 KB
  • references/dispatcher-foundation/test-case-catalog.md4.1 KB
  • references/security-hardening/owasp-coverage-matrix.md10.3 KB
  • references/security-hardening/security-audit-report-template.md4.3 KB
  • references/security-hardening/security-baseline-checklist.md6.2 KB
  • references/security-hardening/security-headers-checklist.md5.2 KB
  • references/security-hardening/security-scenario-playbooks.md3.0 KB
  • references/security-hardening/sensitive-paths-catalog.md6.2 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Dispatcher Security Hardening (Cloud)

Deliver evidence-backed security findings and remediations for cloud workflows that use the Adobe Dispatcher Apache HTTP Server module and related HTTPD configuration.

Variant Scope

  • This skill is cloud-service-only.
  • Scope is fixed by this skill directory; do not ask the user to choose deployment variant.

MCP Tool Contract

Use only these Dispatcher MCP tools:

  • validate
  • lint
  • sdk
  • trace_request
  • inspect_cache
  • monitor_metrics
  • tail_logs

Workflow

  1. Define threat model and audit scope.
  2. Apply cloud guardrails (immutable/default include constraints, reserved probe-path behavior, and CDN-vs-Dispatcher ownership).
  3. Gather baseline evidence (validate, lint, sdk).
  4. Verify exposure controls (trace_request).
  5. Verify cache/header protections (inspect_cache, tail_logs, monitor_metrics).
  6. Return risk-rated findings, prioritized remediation, and rollback.

Verification Scope Selection

Use shared references to select security evidence depth:

Output Contract

Always return:

  • scope + threat model assumptions
  • risk-rated findings table
  • evidence table (tool/input/result)
  • prioritized remediation plan
  • selected test IDs and outcomes
  • rollback plan and residual risk

Guardrails

  • Do not downgrade severity without evidence.
  • Do not claim a control is effective without verification evidence.
  • Keep cloud assumptions explicit for each remediation recommendation.
  • Separate mandatory remediations from defense-in-depth guidance.
  • Separate Dispatcher hardening findings from CDN/WAF edge-policy findings.

References

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Analyzes a multi-step conversion funnel to find where visitors drop off and which steps have the worst leakage. Use this skill when someone describes a journey and asks about conversion rates, drop-off, fallout, or step completion. Trigger for "analyze our checkout funnel," "where are visitors dropping off," "what's our add-to-cart to purchase conversion rate," "funnel analysis," "show me fallout between steps," or "which step loses the most visitors."

The English summary is being prepared. Showing the original description.

aemgdc/aemdev2Updated Oct 18, 2026

Generates a concise, executive-ready performance summary covering key metrics, trends, and what's driving movement. Use this skill when someone needs to produce a briefing, executive summary, performance narrative, or stakeholder readout — for example, "write an exec summary of last week's performance," "create a performance briefing for our leadership team," "produce a monthly business review summary," "what should I tell executives about our metrics," or "generate a performance narrative." Also trigger for "QBR summary," "weekly business review," or "stakeholder briefing."

The English summary is being prepared. Showing the original description.

aemgdc/aemdev2Updated Oct 18, 2026

Produces a compact KPI digest showing how key metrics changed over a period and what's driving the movement. Use this skill when someone asks for a performance summary, a weekly recap, a morning briefing, a KPI update, or any variation of "how did we do this week/month." Also trigger for "give me a performance overview," "what moved in the last 7 days," "pull our AA KPI report," or "summarize our metrics."

The English summary is being prepared. Showing the original description.

aemgdc/aemdev2Updated Oct 18, 2026

Compares the performance of two or more audience segments across key metrics side by side. Use this skill when someone wants to compare audiences or visitor groups — for example, "how do mobile visitors compare to desktop on conversion," "compare new vs. returning visitors," "show me the difference between these two segments," "compare these audiences on our KPIs," or "which segment performs better." Also trigger for "segment comparison" or "audience comparison."

The English summary is being prepared. Showing the original description.

aemgdc/aemdev2Updated Oct 18, 2026

Identifies which items (pages, campaigns, products, channels, regions) had the biggest increases or decreases for a key metric between two time periods. Use this skill when someone asks "what's up and what's down," "which campaigns moved the most," "top gainers and losers," "what pages are trending," "show me what changed by channel," or any variation of identifying the biggest movers and decliners for a metric.

The English summary is being prepared. Showing the original description.

aemgdc/aemdev2Updated Oct 18, 2026

Scan an AEM Edge Delivery Services page for WCAG 2.1 AA accessibility violations and generate specific fixes. Identifies missing alt text, heading hierarchy issues, link text problems, color contrast concerns, and EDS-specific accessibility patterns. Use when fixing accessibility issues, preparing for compliance audits, or remediating WCAG violations.

The English summary is being prepared. Showing the original description.

aemgdc/aemdev2Updated Oct 18, 2026

See all skills by aemgdc

Report a problem with this skill