What problem does it solve?
This Skill solves the risk of shipping insecure web features by guiding you to implement frontend, backend, and security requirements together as one cohesive workflow, instead of treating security as an afterthought.
Core Features & Use Cases
- End-to-end full-stack implementation: Build a complete feature spanning UI, API routes, and the database-backed data flow.
- Auth and authorization by design: Enforce server-side authentication/authorization consistently across endpoints.
- Layered input validation and safe outputs: Validate inputs on both client and server, use parameterized queries to prevent SQL injection, and sanitize/encode outputs to reduce XSS risk.
- Error handling and testing handoff: Ensure robust error paths and clear handoff steps for QA (and deployment when applicable).
- Use Cases: Implement authenticated REST endpoints with corresponding UI, create CRUD workflows driven by forms, connect frontend components to backend endpoints, and handle real-time/WebSocket-driven full-stack features.
Quick Start
Implement the authenticated full-stack feature for the user profile flow described in your acceptance criteria, ensuring server-side auth checks, parameterized database access, validated inputs, safe outputs, and end-to-end error handling.