skills.rest
Blake-John
Blake-JohnCOMMUNITY
Explore all skills by this author →
GitHub

secure-code-guardian

Implement secure authentication, input validation, and data protection for web and API backends.

Updated Mar 17, 2026
Search Tags:#authorization#security#authentication#jwt#owasp#encryption#parameterized-queries
One-click install
npx skills add https://github.com/Blake-John/agent-config --skill secure-code-guardian-blake-john
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-code-guardian
Source: https://github.com/Blake-John/agent-config/tree/main/.agents/skill_spec/secure-code-guardian
Command: npx skills add https://github.com/Blake-John/agent-config --skill secure-code-guardian-blake-john

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps teams implement authentication, authorization, input validation, and data protection to reduce security risks and compliance gaps across applications.

Core Features & Use Cases

  • Implement secure authentication with bcrypt/argon2 and secure session management.
  • Enforce input validation and SQL safety with parameterized queries and Zod-based schemas.
  • Integrate encryption, JWT tokens, and OAuth/SOC for secure access control and OWASP Top 10 prevention.

Quick Start

Design and implement a secure login flow with input validation and JWT-based sessions.

Frequently Asked Questions about secure-code-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure authentication and session management with JWT and bcrypt?▼

Secure authentication with bcrypt or argon2 involves hashing passwords and issuing JWT tokens for stateless session management. This provides defense-in-depth access control while helping web and API backends meet OWASP Top 10 compliance.

What's the best way to prevent SQL injection in API backends using parameterized queries?▼

Preventing SQL injection in API backends requires parameterized queries to separate code from user-supplied data. Combining this with Zod-based input validation schemas ensures data safety and enforces strict data typing across processing workflows.

How does input validation with Zod schemas protect API endpoints?▼

Input validation with Zod schemas protects API endpoints by enforcing strict runtime type checking on incoming requests. This prevents malformed or malicious data from reaching parameterized SQL queries and core processing workflows, mitigating injection risks.

Can I use this approach to enforce OWASP Top 10 compliance and secure headers for web applications?▼

Yes, you can enforce OWASP Top 10 compliance and secure headers for web applications by integrating rate limiting, secure secret management via environment variables, and OAuth setup. These measures collectively establish defense-in-depth data protection across user login flows.

When do I need token-based authentication and secure secret management for user login workflows?▼

Token-based authentication and secure secret management are needed for user login workflows handling sensitive data across web and API backends. They ensure secure access control through JWT tokens and environment variables, preventing unauthorized data exposure.

Related Skills

Explore More Software Engineering Skills→
mauriciodelriomauriciodelrio
3

security-rules

Secure React frontends with XSS prevention, CSP headers, and token protection.

Community
Advanced
0xMerl990xMerl99
1

security-audit

Audit code against OWASP Top 10 and assess CVE impacts.

Community
Advanced
AutumnsGroveAutumnsGrove
5

spider-weave

Implement OAuth 2.0, PKCE, JWT, and session-based authentication with route protection.

Community
Advanced
ftnilssonftnilsson

Authentication & Authorisation

Implement token-based authentication and RBAC access control for backend systems.

Community
Advanced