Secure Code Guardian

Secure authentication uses bcrypt or argon2 to hash passwords, preventing plain-text exposure. This Skill enforces these algorithms alongside token validation and IAM roles to harden login flows and protect user credentials across web and API codebases.

Input validation and sanitization prevent injection and XSS by filtering untrusted data before processing. Parameterized queries separate SQL commands from user input, and input sanitization removes malicious scripts, blocking common OWASP vulnerabilities.

Secure session management enforces HTTPS, security headers, rate limiting, and secret management to protect sensitive data in transit and at rest. This Skill applies these controls to authentication tokens, session cookies, and API credentials.

Encryption secures data in transit and at rest using TLS for network communication and encryption algorithms for stored secrets. This Skill enforces TLS configuration, secret management, and secure key handling across web and API applications.

Yes. This Skill targets existing web and API codebases, hardening authentication, authorization, input validation, and encryption without requiring architectural changes. It integrates bcrypt, argon2, parameterized queries, and security headers into your current stack.

Input validation blocks malicious payloads at the entry point, preventing injection, XSS, and data corruption. Sanitizing and validating all user inputs—especially in APIs—stops attackers from exploiting trust boundaries and reduces OWASP attack surface.