Create secure Next.js API routes with authentication, validation, and error handling.
npx skills add https://github.com/Tvshreyas/DISTILL --skill create-api-route
Please help me install this Agent Skill. Skill: Create API Route Source: https://github.com/Tvshreyas/DISTILL/tree/main/.agent/skills/create-api-route Command: npx skills add https://github.com/Tvshreyas/DISTILL --skill create-api-route
Building secure and scalable Next.js API routes can be error-prone without a consistent pattern. This Skill provides a repeatable blueprint that enforces authentication, input hygiene, and safe data access for server-side endpoints.
Create a new Next.js API route at app/api/<resource>/route.ts following the security patterns described.
High-intent search queries and answers about installing and using this skill.
To create a secure Next.js API route, you need an endpoint scaffold with a top-level authentication guard, input validation, and explicit field destructuring. This pattern enforces user_id scoping for database queries to prevent cross-user data leakage.
The best way to sanitize text inputs in Next.js backend endpoints is through explicit field destructuring and input sanitization before processing. This ensures text inputs are cleaned and safe for typical CRUD workflows.
Preventing cross-user data leakage in Next.js API routes requires enforcing user_id-based data queries. By scoping all database queries to the authenticated user_id, the endpoint restricts data access to authorized records only.
Yes, Next.js API routes need rate limiting for mutation endpoints to enforce security patterns. Applying rate limiting to mutation operations helps protect authenticated endpoints from abusive requests and maintains input hygiene.
You should use generic error responses in Next.js backend APIs to return uniform error payloads without leaking system details. Standardized error handling prevents exposing sensitive backend information during failed input validation or server errors.
vuanhtu1993Set up Auth.js v5 authentication in Next.js apps with Google OAuth.
h617265630Generate backend models, CRUD, API routes, and frontend components for like/unlike features.
boomNDSApply authentication, authorization, input validation, and rate limiting patterns to secure APIs.
act70255Build Node.js backend applications with Express.js and Fastify patterns.
