security

Identifies and mitigates security gaps in authentication, rate limiting, CSRF, and input validation for TypeScript/Node applications.

Updated Dec 25, 2025
One-click install
npx skills add https://github.com/Mavrick91/tanstack-start-app --skill security-mavrick91
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Mavrick91/tanstack-start-app/tree/main/.claude/skills/security
Command: npx skills add https://github.com/Mavrick91/tanstack-start-app --skill security-mavrick91

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Modern web applications suffer from security blind spots around authentication, request validation, and endpoint hardening. This skill provides a comprehensive set of security patterns, checks, and example implementations to help teams review and implement robust auth, rate limiting, CSRF protection, and input validation across APIs and web routes.

Core Features & Use Cases

  • Authentication patterns (session-based and role-based access) with guardrails for protected endpoints.
  • Rate limiting and abuse prevention integrated into API routes and middleware.
  • CSRF protection and secure cookie settings to prevent cross-site attacks.
  • Input validation and secure coding practices to reduce common web vulnerabilities.
  • Audit-ready reference implementations and checklists for secure endpoints.

Quick Start

Configure the security patterns and apply the provided examples to harden your API endpoints and protect user data.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement authentication and role-based access control in a TypeScript Node API?

Implement authentication and role-based access control in a TypeScript Node API by applying session-based patterns and guardrails like requireAuth to protect endpoints. This skill provides reference implementations to restrict access based on user roles.

What's the best way to add CSRF protection and secure cookie settings to web routes?

Add CSRF protection and secure cookie settings to web routes by integrating validation middleware that prevents cross-site attacks. This skill provides patterns to configure secure cookies and validate CSRF tokens across your application.

How does rate limiting work for preventing API abuse on Node endpoints?

Rate limiting for preventing API abuse on Node endpoints works by integrating middleware that restricts request frequency. This skill provides abuse prevention patterns to apply directly into your API routes and middleware.

Can I use this skill to audit existing API endpoints for input validation gaps?

Yes, you can use this skill to audit existing API endpoints for input validation gaps. It provides audit-ready checklists and secure coding practices to review functions and mitigate common web vulnerabilities.

Does this security hardening skill support production-grade TypeScript and Node stacks?

Yes, this security hardening skill supports production-grade TypeScript and Node stacks. It applies across API endpoints, web routes, and middleware to identify and mitigate security gaps in modern applications.

Why is input validation necessary for securing modern web application APIs?

Input validation is necessary for securing modern web application APIs to reduce common web vulnerabilities and prevent malicious data entry. This skill implements secure coding practices to validate requests across protected endpoints.