What problem does it solve?
This Skill proactively identifies and mitigates security risks arising from improperly validated user inputs, preventing common vulnerabilities like division-by-zero errors, unbounded pagination, and incomplete cache keys.
Core Features & Use Cases
- Division-by-Zero Prevention: Ensures that all division operations are guarded against zero divisors, especially in calculations involving user-supplied numbers.
- Pagination Bounds Enforcement: Validates that
limit and offset parameters for pagination are within safe and defined ranges, preventing excessive data retrieval.
- Cache Key Integrity: Verifies that cache keys are complete and tenant-isolated, preventing data leakage between users.
- Numeric Range Validation: Checks that numeric inputs (like fitness metrics) are within expected, safe ranges.
- Use Case: Before deploying a new API endpoint that accepts user-defined pagination and performs calculations, run this skill to ensure all inputs are validated, preventing potential crashes and security breaches.
Quick Start
Run the check-input-validation skill to scan the codebase for potential input validation issues.