skills.rest
tranhieutt
tranhieuttCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

backend-security-coder

Harden Node.js and TypeScript backend APIs against injection and CSRF attacks.

70|42|Updated Mar 27, 2026
Search Tags:#security#authentication#validation#owasp#backend#api-security#secure-coding
One-click install
npx skills add https://github.com/tranhieutt/software_development_department --skill backend-security-coder-tranhieutt
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: backend-security-coder
Source: https://github.com/tranhieutt/software_development_department/tree/main/.claude/skills/backend-security-coder
Command: npx skills add https://github.com/tranhieutt/software_development_department --skill backend-security-coder-tranhieutt

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Backend development teams often deploy APIs without consistently applying secure input validation, authentication, and architecture guardrails, leaving systems vulnerable to injection, CSRF, and unauthorized access.

Core Features & Use Cases

  • Secure coding playbook: Offers best practices for sanitizing inputs, parameterizing queries, and enforcing allowlists across middleware, guards, and API routes.
  • Defense-in-depth configuration: Advises on HTTP security headers, CSRF/SSRF mitigations, session protection, and secret management for production-grade backends.
  • Use Case: When building or reviewing authentication and authorization flows for a TypeScript backend, incorporate this skill to harden each endpoint before release.

Quick Start

Ask this skill to review and harden the authentication, validation, and error handling of your backend service.

Frequently Asked Questions about backend-security-coder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure backend API authentication and prevent injection attacks in TypeScript?▼

To secure backend API authentication, enforce strict input validation, parameterize database queries, and apply HTTP security headers across middleware and API routes to block injection and unauthorized access in Node.js services.

What is the best way to implement CSRF and SSRF mitigations for Node.js APIs?▼

Implement CSRF and SSRF mitigations by configuring defense-in-depth HTTP security headers, enforcing strict allowlists, and applying session protection across backend API middleware to prevent cross-site request forgery.

How do I review and harden authorization flows in a TypeScript backend?▼

Review and harden authorization flows by auditing middleware, guards, and API routes for strict input sanitization, secure session management, and parameterized database queries before deployment to ensure endpoint protection.

Does this secure coding approach work for Node.js middleware and API guards?▼

Yes, this secure coding approach targets Node.js and TypeScript services, specifically hardening middleware, guards, and API routes by enforcing input validation, parameterized queries, and audited logging for production-grade deployments.

Why does my backend API need strict input validation and allowlists?▼

Your backend API needs strict input validation and allowlists to prevent injection attacks and unauthorized access. Applying these secure coding guardrails across middleware and routes ensures consistent architecture protection before release.

Related Skills

Explore More Software Engineering Skills→
thmspithmspi

backend-patterns

Design scalable Node.js backend architectures for REST and GraphQL APIs.

Community
Advanced
JeffallanJeffallan
10.9k

fullstack-guardian

Automate end-to-end feature delivery across frontend, backend, and security.

Community
Advanced
toobuttatoobutta

secrets

Initialize Infisical and generate .env files for backend and frontend environments.

Community
Advanced
reverb256reverb256

firewall-config

Configure iptables, nftables, UFW, and cloud provider firewalls.

Community
Advanced