security

XSS prevention requires sanitizing user input before rendering. This Skill applies SafeMarkdown and sanitizePlainText utilities to strip malicious scripts from content, protecting against injection attacks across API endpoints and file uploads while preserving safe markup.

Centralized input validation catches malicious or malformed data at entry points. This Skill provides security-utils patterns to validate all incoming requests, enforcing type checks and constraints consistently across endpoints to block injections and XSS before they reach your application logic.

Rate limiting restricts request frequency per user or IP to prevent brute-force attacks and denial-of-service attempts. This Skill implements rate-limiter patterns that enforce quotas on endpoints, allowing you to control traffic and protect backend resources.

Ownership checks prevent unauthorized modifications by ensuring users can only update their own data. This Skill provides patterns to verify authentication and enforce ownership validation on write operations, blocking privilege escalation and data tampering.

Yes. This Skill integrates authentication verification with authorization enforcement, confirming user identity and verifying permissions before granting access to protected resources, aligned with OWASP security controls for API protection.

Centralized patterns enforce consistent controls but require discipline across all new endpoints. Performance overhead from sanitization and rate limiting must be monitored; patterns assume your framework supports middleware or decorator patterns for uniform application.