backend-security-coder

Implement secure backend code with input validation and authentication.

Updated Feb 21, 2026
One-click install
npx skills add https://github.com/HCMUTE-RTIC/fit-hcmute --skill backend-security-coder-hcmute-rtic
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: backend-security-coder
Source: https://github.com/HCMUTE-RTIC/fit-hcmute/tree/main/.agent/skills/backend-security-coder
Command: npx skills add https://github.com/HCMUTE-RTIC/fit-hcmute --skill backend-security-coder-hcmute-rtic

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need for secure backend development by providing expert guidance and implementation for robust security practices, preventing vulnerabilities, and ensuring the integrity of backend systems.

Core Features & Use Cases

  • Secure Coding Implementation: Write and review code adhering to best practices for input validation, authentication, authorization, and data protection.
  • Vulnerability Prevention: Proactively identify and mitigate common security risks like injection attacks, CSRF, and SSRF.
  • API Security: Ensure APIs are protected against unauthorized access and malicious exploitation.
  • Use Case: A developer needs to implement a new user registration API endpoint. They can use this Skill to ensure the endpoint includes proper input validation, secure password hashing, and protection against common web vulnerabilities.

Quick Start

Implement secure user authentication with JWT and refresh token rotation for the user service.

Frequently Asked Questions about backend-security-coder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure backend authentication with JWT and refresh token rotation?

Secure backend authentication requires implementing JWT with refresh token rotation to maintain session integrity. This approach ensures tokens are properly validated and rotated during user service interactions, preventing unauthorized access to backend systems.

What is the best way to ensure API security against unauthorized access?

The best way to ensure API security is by enforcing strict authentication, authorization, and input validation on your endpoints. Protecting APIs against unauthorized access requires building security-first applications resistant to common web attack vectors.

How do I write secure code for a new user registration API endpoint?

Writing secure code for a user registration API endpoint requires proper input validation, secure password hashing, and robust data protection. Following secure coding best practices ensures the endpoint is safeguarded against common web vulnerabilities.

Does secure backend development require specific frameworks to prevent CSRF and SSRF?

Secure backend development does not mandate specific frameworks but requires implementing defensive programming and secure architecture practices. Mitigating CSRF and SSRF relies on proper input validation and vulnerability prevention techniques regardless of the underlying platform.