grey-haven-security-practices

Name: grey-haven-security-practices
Availability: InStock
Author: Grey Haven

Enforce Grey Haven security practices for TanStack Start and FastAPI applications.

29|4|Updated Aug 10, 2025

Ready to run

npx skills add https://github.com/greyhaven-ai/claude-code-config --skill grey-haven-security-practices

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: grey-haven-security-practices
Source: https://github.com/greyhaven-ai/claude-code-config/tree/main/grey-haven-plugins/security/skills/security-practices
Command: npx skills add https://github.com/greyhaven-ai/claude-code-config --skill grey-haven-security-practices

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill eliminates the complexity of implementing enterprise-grade security by providing battle-tested patterns for authentication, authorization, and data protection.

Core Features & Use Cases

Secret Management: Secure environment variable handling with Doppler integration.
Input Validation: Comprehensive validation schemas for TypeScript and Python.
Multi-Tenant Isolation: Database-level security with PostgreSQL RLS policies.
Use Case: Imagine you're building a new SaaS feature. Use this Skill to automatically implement proper input validation, secure database queries, and tenant isolation without manual security research.

Quick Start

When implementing user authentication, use this Skill to set up secure session management with httpOnly cookies and proper CORS configuration.

Frequently Asked Questions about grey-haven-security-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce security best practices across TanStack Start and FastAPI applications?▼

Enforce security best practices by implementing input validation with Zod and Pydantic schemas, securing secrets through Doppler integration, applying PostgreSQL RLS for multi-tenant isolation, and adding Redis-backed rate limiting. This Skill automates these patterns to prevent insecure configurations and OWASP Top 10 vulnerabilities across your stack.

Can I use Doppler for secret management in both TypeScript and Python applications?▼

Yes. This Skill integrates Doppler-based secret access for both TanStack Start and FastAPI environments, providing secure environment variable handling without manual credential management across your entire application stack.

How do I implement multi-tenant data isolation with PostgreSQL RLS?▼

Implement multi-tenant isolation by applying PostgreSQL Row-Level Security policies through this Skill, which enforces tenant-scoped access at the database level. RLS policies automatically restrict query results to data belonging to each tenant, eliminating application-layer isolation bugs.

What's the best way to validate user input in TypeScript and Python simultaneously?▼

Use schema-based validation with Zod for TypeScript and Pydantic for Python through this Skill's unified patterns. Both frameworks parse and validate input against defined schemas, catching malformed data before it reaches your database or business logic.

How do I prevent SQL injection and ensure safe database queries?▼

Prevent SQL injection by using parameterized queries across both TanStack Start and FastAPI layers. This Skill enforces safe SQL handling patterns that separate query structure from user-supplied data, eliminating injection attack vectors.

Does this Skill include rate limiting to protect against abuse?▼

Yes. Rate limiting is implemented using Redis-backed throttling, protecting your endpoints from brute force attacks and resource exhaustion. The Skill configures rate limits automatically across your application's entry points.