input-validation-sanitization-auditor

The best way to secure endpoints involves applying validation schemas to constrain input formats, using sanitization libraries for output encoding, and enforcing parameterized queries for database access. This Skill reviews code to ensure these defenses mitigate common injection vectors.

Zod validates incoming data against predefined schemas, verifying constraints like age ranges and email formats. This prevents malicious or malformed inputs from reaching application logic, serving as a primary filter against injection attacks.

This approach requires TypeScript runtime environments to implement its validation schemas and sanitization strategies. It specifically relies on TypeScript alongside Zod and html-escaper libraries to enforce secure coding patterns.

Html-escaper mitigates XSS vulnerabilities by encoding untrusted data before it renders in the browser. This secure output encoding ensures potentially malicious scripts are displayed as inert text rather than executed.