security-prompts-controls

CSRF protection and rate limiting prevent unauthorized form submissions and abuse. This Skill provides pre-configured templates with withCsrf and withRateLimit controls that apply these defenses automatically to your form endpoint, blocking forged requests and excessive traffic without custom implementation.

Input validation and XSS sanitization stop malicious data from reaching your database and users' browsers. This Skill includes safeTextSchema and emailSchema validators plus XSS sanitization built into middleware, so form submissions are cleaned and validated before processing.

Secure authenticated endpoints require authentication verification, input validation, and proper error handling. This Skill provides middleware composition patterns and validateRequest schemas to implement safe profile updates with authorization checks and controlled error responses.

Yes. Public read endpoints need query validation and rate limiting to prevent abuse. This Skill includes validateRequest and withRateLimit templates for building read-only endpoints that safely accept and validate incoming queries while protecting against overload.

With this Skill's pre-configured templates, secure endpoints for contact forms, authenticated updates, and public APIs take 15–30 minutes. The templates handle CSRF, rate limiting, input validation, and error handling, eliminating the need to build security controls manually.

Secure error handling avoids leaking sensitive information while helping with debugging. This Skill includes error-handling patterns that provide useful feedback to legitimate users without exposing system details, database errors, or stack traces to attackers.