fullstack-guardian

Implements security-focused full-stack features spanning frontend, backend, and database layers.

Updated May 23, 2026
One-click install
npx skills add https://github.com/Oatse/CWE-Automation --skill fullstack-guardian-oatse
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fullstack-guardian
Source: https://github.com/Oatse/CWE-Automation/tree/main/.agents/skills/fullstack-guardian
Command: npx skills add https://github.com/Oatse/CWE-Automation --skill fullstack-guardian-oatse

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Building features that span frontend and backend often leads to inconsistent validation, missed authorization checks, and security gaps between layers. This Skill enforces a three-perspective workflow (Frontend, Backend, Security) so every feature ships with authentication, input validation, output encoding, and parameterized queries addressed at every layer. ## Core Features & Use Cases - Three-Perspective Design Workflow: Produces a technical design document covering UI components, API endpoints, and security controls before any code is written. - Layered Security Enforcement: Applies a per-feature security checklist covering auth, authorization, rate limiting, input sanitization, and audit logging. - Full-Stack Implementation Guidance: Provides reference patterns for CRUD flows, REST/GraphQL API design, WebSocket real-time features, microservices, monorepo structure, and CI/CD deployment. - Use Case: When asked to build an authenticated user profile feature, it designs the endpoint with ownership checks and parameterized queries, builds the React form with client-side validation, and documents the security notes before handoff to testing. ## Quick Start Ask the AI to implement a new full-stack feature, such as an authenticated REST endpoint with a corresponding form UI, and it will produce the design, backend code, frontend code, and security notes.

Frequently Asked Questions about fullstack-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a secure full-stack feature with frontend and backend?

Start with a three-perspective design covering UI components, API endpoints, and security controls, then implement incrementally. Validate input on both client and server, use parameterized queries, enforce authorization server-side, and test each component as you build.

Should I use a monolith or microservices architecture?

Choose a modular monolith for new products, teams under ten developers, or simple domains. Choose microservices when you have clear bounded contexts, independent scaling needs, multiple teams, and sufficient DevOps infrastructure.

REST vs GraphQL: which API style should I choose?

Use REST for simple CRUD APIs, public APIs, and when HTTP caching matters. Use GraphQL for mobile apps needing flexible queries, complex data requirements, or real-time subscriptions.

How do I prevent SQL injection and XSS in web applications?

Use parameterized queries for all database access and never interpolate user input into SQL strings. Prevent XSS by sanitizing output, encoding responses, and configuring Content Security Policy headers.

What are the limitations of client-side validation?

Client-side validation improves user experience but provides no security since attackers can bypass it entirely. Always re-validate on the server using schemas like Zod or Pydantic, and treat client checks as a convenience layer only.