Skill UI

Implement secure API design patterns including authentication, authorization, input validation, rate limiting, and protection against common API vulnerabilities

API security testing workflow for REST and GraphQL APIs covering authentication, authorization, rate limiting, input validation, and security best practices.

Ensures code complies with security best practices across authentication, input handling, file uploads, APIs, secrets, and sensitive data operations by providing a structured review checklist covering secrets management, validation, injection prevention, authorization, XSS, and CSRF safeguards.

This skill defines mandatory architectural standards and best practices for developing robust, scalable, and observable backend services using Node.js, Express, and TypeScript. It mandates layered architecture (Routes → Controllers → Services → Repositories), strong error handling, dependency injection, and input validation (Zod) to ensure maintainability and reliability in production environments. Use when designing or refactoring core API logic.

Master defensive programming techniques for Bash scripts to ensure production-grade reliability. This guide covers advanced error handling, safety best practices, and input validation, making it essential for building fault-tolerant automation, CI/CD pipelines, and system administration utilities that must handle complex edge cases.

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

Automates input validation checker guidance within the Security Fundamentals category, offering best practices, secure coding patterns, production-ready snippets, and output validation for common standards.

Automates guidance and code for identifying insecure deserialization flaws, following Security Fundamentals best practices to help with authentication, input validation, and secure coding checks when that phrase is mentioned.

Guides developers through secure mobile coding practices, covering input validation, WebView hardening, protected data storage, HTTPS enforcement, and authentication flows tailored for mobile apps.

Automatically scans code for missing or weak input validation, highlighting potential XSS, SQL injection, or command injection risks so developers can harden their applications during reviews or audits.

Guides secure authentication, authorization, input validation, and OWASP Top 10 defenses with best-practice code snippets for hashing, parameterized queries, validation, headers, and logging.

Comprehensive checklist for application security hardening, covering input validation, output encoding, SQL/CSRF defenses, security headers, JWT best practices, secrets handling, rate limiting, and dependency audits to keep web services resilient.