security-hardening

Apply OWASP-aligned security patterns across monorepo backend and frontend pipelines.

2|Updated Jan 8, 2026

Search Tags:#security #validation #owasp #nextjs #cors #nestjs #hardening

Ready to run

npx skills add https://github.com/Quanby-IT-Solutions/turbo-template --skill security-hardening-quanby-it-solutions

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-hardening
Source: https://github.com/Quanby-IT-Solutions/turbo-template/tree/main/.ruler/skills/security-hardening
Command: npx skills add https://github.com/Quanby-IT-Solutions/turbo-template --skill security-hardening-quanby-it-solutions

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security patterns and hardening practices for this monorepo. Use when implementing authentication, configuring CORS, validating input, handling secrets, securing API endpoints, or reviewing code for vulnerabilities.

Core Features & Use Cases

Input validation and request validation via Zod contracts and global pipes
Cookie-based authentication with Better Auth
Centralized environment validation and secure error masking
CORS whitelisting and CSP considerations
Secrets management and secure logging

Quick Start

Implement the defined security patterns across backend and web apps by validating inputs, enforcing cookie-based authentication, and configuring strict CORS and env checks.

Frequently Asked Questions about security-hardening

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement input validation and CORS in a Next.js monorepo?▼

To implement input validation and CORS in a Next.js monorepo, apply centralized Zod contracts for request validation and configure strict CORS whitelisting across your backend and middleware pipelines to secure API endpoints.

How does centralized environment validation handle secrets in CI/CD pipelines?▼

Centralized environment validation enforces runtime environment checks and secure secret management in CI/CD pipelines by carefully masking sensitive data and applying strict environment controls to prevent unauthorized access.

What's the best way to set up cookie-based authentication with Better Auth?▼

The best way to set up cookie-based authentication with Better Auth is to enforce secure cookie-based sessions across frontend and backend apps, aligning with OWASP practices for robust access control.

How do you mask sensitive errors and prevent data leakage in NestJS applications?▼

You mask sensitive errors in NestJS applications by implementing safe error masking techniques within global pipes and centralized validation logic, ensuring internal system details are not exposed to the client.

When do I need Content Security Policy (CSP) considerations for my monorepo?▼

You need Content Security Policy (CSP) considerations when hardening security patterns across web applications, specifically to prevent cross-site scripting and data injection attacks by defining approved content sources.

Does this approach support rate limiting and OWASP-aligned practices out of the box?▼

Yes, this approach supports rate limiting and OWASP-aligned practices out of the box by applying authenticated access, input validation, and strict environment controls across backend, frontend, and middleware pipelines.