skills.rest
JustineDevs
JustineDevsCOMMUNITY
Explore all skills by this author →
Website𝕏@Trader2GGitHub

security-best-practices

Outline pragmatic security hardening practices for web apps and APIs.

Updated Mar 20, 2026
Search Tags:#security#jwt#owasp#input-validation#csrf#https#helmet
One-click install
npx skills add https://github.com/JustineDevs/E-Commerce --skill security-best-practices-justinedevs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-best-practices
Source: https://github.com/JustineDevs/E-Commerce/tree/main/.claude/skills/security-best-practices
Command: npx skills add https://github.com/JustineDevs/E-Commerce --skill security-best-practices-justinedevs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps teams secure web applications and APIs by enforcing HTTPS, robust security headers, input validation, CSRF protection, secret management, and resilient authentication flows, reducing risk of common vulnerabilities.

Core Features & Use Cases

  • HTTPS enforcement with Helmet-based security headers to guard against common attacks.
  • Input validation and protection against SQL injection and XSS through parameterized queries and schema validation.
  • CSRF protection and secure session management to prevent cross-site request forgery.
  • Secrets management and secure configuration practices to avoid credential leakage.
  • JWT-based authentication with token rotation and refresh for secure user sessions.
  • Use cases include public APIs, admin dashboards, and multi-tenant applications requiring strong security controls.

Quick Start

Install the security-best-practices skill and integrate the provided middleware patterns into your API server to begin hardening immediately.

Frequently Asked Questions about security-best-practices

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I harden my web API against OWASP Top 10 vulnerabilities?▼

To harden web APIs against OWASP Top 10 vulnerabilities, enforce HTTPS, apply Helmet security headers, validate inputs, implement CSRF protection, and manage secrets securely to reduce common attack risks.

What's the best way to implement JWT authentication with token rotation?▼

Implement JWT authentication with token rotation by applying secure session management patterns that use refresh tokens to maintain resilient user sessions without exposing credentials.

How do I prevent CSRF and SQL injection in a GraphQL backend?▼

Prevent CSRF and SQL injection in GraphQL backends by enforcing schema validation, using parameterized queries, and applying CSRF protection middleware to block cross-site request forgery attempts.

Does this security hardening approach work for multi-tenant admin dashboards?▼

Yes, this security hardening approach supports multi-tenant admin dashboards and public endpoints by providing strong security controls including HTTPS enforcement, header hardening, and rate limiting.

How do I enforce HTTPS and secure headers using Helmet middleware?▼

Enforce HTTPS and secure headers using Helmet middleware by integrating the provided middleware patterns into your API server to immediately guard against common web attacks.

Related Skills

Explore More Software Engineering Skills→
Fantasia1999Fantasia1999

senior-backend

Design and implement REST APIs, microservices, and PostgreSQL schemas with authentication.

Community
Advanced
79yuuki79yuuki

pentest

Plan authorized penetration tests and generate assessment reports for web, API, and infrastructure targets.

Community
Advanced
boomNDSboomNDS

api-security-best-practices

Apply authentication, authorization, input validation, and rate limiting patterns to secure APIs.

Community
Advanced
kamal-haiderkamal-haider

integration-expert

Proxy external API calls through a backend layer with caching and rate limiting.

Community
Advanced