skills.rest
gaborbencsik
gaborbencsikCOMMUNITY
Explore all skills by this author →
GitHub

secure-code-guardian

Prevents web vulnerabilities including injection, XSS/CSRF, authentication weaknesses and misconfigurations across endpoints.

Updated Mar 27, 2026
Search Tags:#authorization#authentication#input validation#secure coding#security headers#JWT security#OWASP prevention
One-click install
npx skills add https://github.com/gaborbencsik/tipp-game --skill secure-code-guardian-gaborbencsik
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secure-code-guardian
Source: https://github.com/gaborbencsik/tipp-game/tree/main/.claude/skills/secure-code-guardian
Command: npx skills add https://github.com/gaborbencsik/tipp-game --skill secure-code-guardian-gaborbencsik

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Secure Code Guardian helps prevent common web application security failures by guiding you to implement authentication, authorization, input validation, and security headers correctly.

Core Features & Use Cases

  • Defense-in-depth security workflow: Threat modeling, secure design, implementation guidance, validation checkpoints, and security documentation.
  • Authentication & authorization hardening: Rate limiting, lockout patterns, session/token safety, and privilege escalation prevention (horizontal/vertical).
  • OWASP Top 10 prevention patterns: Injection prevention via parameterized queries, XSS/CSRF mitigations, secure headers (CSP/HSTS/clickjacking protections), and robust logging.
  • Validation-first implementation: Zod-based input validation and rejection of malicious payloads before they reach persistence or rendering.

Quick Start

Apply Secure Code Guardian when you are adding or changing login, JWT validation, or role checks so that you validate credentials, enforce authorization, and reject malicious input before saving or responding.

Frequently Asked Questions about secure-code-guardian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent OWASP Top 10 vulnerabilities like XSS and injection in my web application?▼

Prevent OWASP Top 10 vulnerabilities by enforcing parameterized database queries, applying strict schema validation with Zod, and configuring security headers to block injection and cross-site scripting attacks before rendering.

What is the best way to implement secure JWT validation and session handling?▼

Secure JWT validation and session handling require enforcing secure token settings, applying rate limiting, and implementing lockout patterns to prevent unauthorized access and token misuse across web endpoints.

How do I enforce RBAC and ABAC authorization to prevent privilege escalation?▼

Enforce RBAC and ABAC authorization by validating user roles against strict access control policies, preventing horizontal and vertical privilege escalation during login flows and endpoint routing.

Do I need schema validation to secure API endpoints against malicious payloads?▼

Yes, schema validation is required to secure API endpoints by rejecting malicious payloads before they reach persistence layers, using tools like Zod to validate inputs against strict schemas.

How to configure security headers and CORS for CSRF protection?▼

Configure security headers and CORS for CSRF protection by implementing Content Security Policy, HSTS, and clickjacking protections to strictly control resource origins and cross-site requests.

Related Skills

Explore More Software Engineering Skills→
JustineDevsJustineDevs

owasp-security

Apply OWASP Top 10 guidance to identify and remediate web application security risks.

Community
Advanced
RIMTHAN-LABRIMTHAN-LAB
1

owasp-mobile-security-checker

Analyze Flutter applications for OWASP Mobile Top 10 vulnerabilities.

Official
Intermediate
cenjiecenjie

api-security-hardening

Secure REST APIs with authentication, rate limiting, CORS, and input validation.

Community
Advanced
Mentor-WizardMentor-Wizard
10

security-reviewer

Conduct security audits with SAST scans, vulnerability analysis, and penetration testing.

Official
Advanced