fullstack-guardian

Implements security-focused full-stack features spanning frontend, backend, and API layers.

Updated Feb 24, 2026
One-click install
npx skills add https://github.com/marketiv-id/marketiv-web --skill fullstack-guardian-marketiv-id
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fullstack-guardian
Source: https://github.com/marketiv-id/marketiv-web/tree/main/00_BACKEND/.agents/skills/fullstack-guardian
Command: npx skills add https://github.com/marketiv-id/marketiv-web --skill fullstack-guardian-marketiv-id

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Building features that span frontend and backend often leads to inconsistent validation, missing authorization checks, and security gaps between layers. This Skill enforces a three-perspective workflow (Frontend, Backend, Security) so every feature ships with authentication, input validation, output encoding, and parameterized queries addressed at each layer. ## Core Features & Use Cases - Three-Perspective Design: Produces a technical design document covering UI components, API endpoints, and security controls before any code is written. - Layered Security Enforcement: Applies a per-feature security checklist covering auth, authorization, rate limiting, input sanitization, and audit logging. - End-to-End Implementation Guidance: Provides reference patterns for CRUD flows, REST/GraphQL API design, error handling, real-time features, microservices, caching, and CI/CD deployment. - Use Case: When adding an authenticated user profile endpoint with a corresponding React form, the Skill generates the backend route with parameterized queries and scoped responses, the frontend component with client-side guards, and the security notes explaining authorization boundaries. ## Quick Start Ask the agent to implement a new full-stack feature, such as an authenticated CRUD API with a corresponding form UI, and request that it follow the security checklist before writing code.

Frequently Asked Questions about fullstack-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a secure full-stack feature with frontend and backend?

Start with a three-perspective design covering UI components, API endpoints, and security controls, then implement each layer with validation on both client and server. Run the security checklist before coding to confirm auth, authorization, and output encoding are addressed.

What security checks should every API endpoint have?

Every endpoint needs authentication middleware, authorization checks for resource ownership, schema-based input validation, parameterized queries to prevent SQL injection, output filtering to exclude sensitive fields, and rate limiting on sensitive routes like login.

Should I use a monolith or microservices for a new web application?

Choose a modular monolith for new products, teams under ten developers, or simple domains, since it offers faster initial development and simpler deployment. Microservices fit larger teams with clear bounded contexts, independent scaling needs, and available DevOps infrastructure.

REST vs GraphQL: which API style should I choose?

REST suits simple CRUD APIs, public APIs needing HTTP caching, and teams unfamiliar with GraphQL. GraphQL fits mobile apps needing flexible queries, complex data requirements, and real-time subscriptions.

How do I prevent SQL injection and XSS in full-stack apps?

Use parameterized queries or ORM bindings for all database access instead of string interpolation. For XSS, sanitize and encode all output rendered in the UI, validate input with schemas like Zod or Pydantic, and configure CSP headers.

When should I not use JWT tokens for authentication?

JWTs are hard to revoke before expiry, so avoid them alone when immediate session invalidation is required. A hybrid approach with short-lived access tokens plus revocable refresh tokens stored server-side handles both scalability and revocation.