skills.rest
nonputtipong
nonputtipongCOMMUNITY
Explore all skills by this author →
GitHub

backend-security-coder

Implement secure backend coding practices for input validation and API security.

Updated Feb 24, 2026
Search Tags:#authentication#input validation#secure coding#vulnerability prevention#api security#backend security
One-click install
npx skills add https://github.com/nonputtipong/Oryn --skill backend-security-coder-nonputtipong
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: backend-security-coder
Source: https://github.com/nonputtipong/Oryn/tree/main/.agent/skills/backend-security-coder
Command: npx skills add https://github.com/nonputtipong/Oryn --skill backend-security-coder-nonputtipong

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need for secure backend development by providing expert guidance and implementation strategies to prevent vulnerabilities and protect applications from common attack vectors.

Core Features & Use Cases

  • Secure Coding Practices: Offers in-depth knowledge on input validation, injection prevention, and secure error handling.
  • API & Database Security: Provides detailed instructions for securing APIs, databases, and external requests.
  • Use Case: A developer needs to implement robust authentication and authorization for a new microservice. This Skill can guide them through setting up secure JWT handling, RBAC, and secure session management.

Quick Start

Implement secure input validation for a new API endpoint that accepts user-submitted data.

Frequently Asked Questions about backend-security-coder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure input validation for API endpoints accepting user-submitted data?▼

Secure input validation requires strict allowlisting, type enforcement, and format checking before processing API payloads. This Skill provides defensive programming strategies to sanitize user-submitted data, preventing injection attacks and ensuring only properly structured requests reach backend application logic.

What's the best way to set up JWT handling and RBAC for microservice authentication?▼

Microservice authentication setup requires secure JWT handling, Role-Based Access Control (RBAC), and robust session management. This Skill guides developers through implementing authorization flows, securing token exchanges, and enforcing access policies to protect backend services from unauthorized access.

How does CSRF protection and HTTP security header configuration work for backend applications?▼

CSRF protection and HTTP security headers mitigate malicious cross-origin requests and client-side attack vectors. This Skill details defensive programming techniques for configuring security headers, validating request origins, and implementing anti-CSRF tokens to secure backend application endpoints.

What are the most effective vulnerability prevention techniques for database security?▼

Database vulnerability prevention focuses on parameterized queries, secure error handling, and strict access controls to block injection attacks. This Skill outlines secure coding practices for protecting database layers, ensuring external requests and data transactions do not expose sensitive application information.

Do I need defensive programming practices to secure external API requests?▼

Defensive programming is essential for securing external API requests to prevent unauthorized data access and injection vulnerabilities. This Skill provides expert backend security coding practices for validating external requests, handling errors securely, and ensuring API security across microservice architectures.

Related Skills

Explore More Software Engineering Skills→
symbiosikasymbiosika

backend-app

Implement backend APIs and routing with the symbiosika-framework.

Official
Advanced
brenordvbrenordv

security

Audit software systems for security vulnerabilities and regulatory compliance.

Community
Advanced
BagelHoleBagelHole
46

firewall-config

Configure iptables, nftables, and AWS Security Groups for traffic filtering.

Community
Intermediate
devendrapratapsinghdevendrapratapsingh
1

security

Scan code, containers, and infrastructure for security vulnerabilities.

Community
Advanced