security-guidelines

To prevent SQL injection and XSS vulnerabilities, you should use parameterized queries or ORMs for database access and safely sanitize user-provided HTML before rendering. This Skill provides code examples for both techniques.

Input validation is the best way to prevent injection attacks, and this Skill demonstrates robust validation techniques using Zod. You must apply these validation rules to all external data sources entering your application.

Secure secrets management requires handling API keys and sensitive information through dedicated practices rather than hardcoding them. This Skill provides guidelines on securely managing secrets to mitigate common vulnerabilities.

Recommended HTTP security headers are essential for enhanced application protection against common threats. This Skill lists specific security headers you should configure to enforce defense in depth and secure defaults.

Yes, this Skill covers secure coding practices for authentication mechanisms. It enforces least privilege and defense in depth principles through practical code examples and best practice recommendations.

You need to implement defense in depth and least privilege principles whenever handling input validation, authentication, or secrets management. This Skill provides actionable guidelines to enforce these secure defaults across your application.