grey-haven-security-practices

Enforce security best practices by implementing input validation with Zod and Pydantic schemas, securing secrets through Doppler integration, applying PostgreSQL RLS for multi-tenant isolation, and adding Redis-backed rate limiting. This Skill automates these patterns to prevent insecure configurations and OWASP Top 10 vulnerabilities across your stack.

Yes. This Skill integrates Doppler-based secret access for both TanStack Start and FastAPI environments, providing secure environment variable handling without manual credential management across your entire application stack.

Implement multi-tenant isolation by applying PostgreSQL Row-Level Security policies through this Skill, which enforces tenant-scoped access at the database level. RLS policies automatically restrict query results to data belonging to each tenant, eliminating application-layer isolation bugs.

Use schema-based validation with Zod for TypeScript and Pydantic for Python through this Skill's unified patterns. Both frameworks parse and validate input against defined schemas, catching malformed data before it reaches your database or business logic.

Prevent SQL injection by using parameterized queries across both TanStack Start and FastAPI layers. This Skill enforces safe SQL handling patterns that separate query structure from user-supplied data, eliminating injection attack vectors.

Yes. Rate limiting is implemented using Redis-backed throttling, protecting your endpoints from brute force attacks and resource exhaustion. The Skill configures rate limits automatically across your application's entry points.