secure-code-guardian

Implement OWASP Top 10 security controls for web applications.

Updated Jun 16, 2026
One-click install
npx skills add https://github.com/Design-System-ET/genexus-dev-opencode --skill secure-code-guardian-design-system-et
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secure-code-guardian
Source: https://github.com/Design-System-ET/genexus-dev-opencode/tree/main/skills/secure-code-guardian
Command: npx skills add https://github.com/Design-System-ET/genexus-dev-opencode --skill secure-code-guardian-design-system-et

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bcrypt, jsonwebtoken, zod, express-rate-limit, helmet, and includes references (resource) components.

What problem does it solve?

This Skill addresses the critical challenge of building secure applications by providing standardized, battle-tested patterns for authentication, authorization, and input validation to prevent common security breaches.

Core Features & Use Cases

  • Vulnerability Prevention: Implements defenses against OWASP Top 10 threats including SQL injection, XSS, and CSRF.
  • Secure Implementation: Provides ready-to-use patterns for password hashing with bcrypt, JWT management, and secure header configuration.
  • Use Case: When building a new user authentication module, use this Skill to ensure passwords are hashed correctly, rate limiting is applied to endpoints, and JWTs are issued with secure claims and expiration policies.

Quick Start

Invoke the secure-code-guardian skill to audit the current authentication implementation and apply recommended security headers and input validation patterns.

Frequently Asked Questions about secure-code-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement secure JWT authentication and password hashing in my web application?

Secure JWT authentication is implemented using bcrypt for password hashing and jsonwebtoken for token management. This enforces secure claims and expiration policies to prevent unauthorized access.

What is the best way to prevent OWASP Top 10 vulnerabilities like SQL injection and XSS?

Preventing OWASP Top 10 vulnerabilities like SQL injection and XSS requires defense-in-depth principles. Input sanitization with Zod and secure header configuration with helmet mitigate these common web application threats.

How do I add rate limiting and secure headers to an Express API?

Adding rate limiting and secure headers to an Express API utilizes express-rate-limit and helmet. These libraries configure HTTP headers and restrict endpoint request frequencies to mitigate automated attacks.

Does Zod work with bcrypt and JWT for comprehensive input validation and authorization?

Zod works with bcrypt and JWT to provide comprehensive input validation and authorization. It sanitizes incoming data before bcrypt processes passwords or JWTs issue access tokens, ensuring defense-in-depth.

Why do I need input validation and sanitization for user authentication modules?

Input validation and sanitization are needed for user authentication modules to block malicious payloads. Validating data with Zod before processing prevents injection attacks that bypass authentication barriers.