skills.rest
rajeshyg
rajeshygCOMMUNITY
Explore all skills by this author →
GitHub

Security Rules Skill

Enforce input validation, sanitization, and secure storage rules for web applications.

Updated Nov 22, 2025
Search Tags:#secure coding#data protection#web security#vulnerability prevention#frontend security#XSS prevention#AI agent security
One-click install
npx skills add https://github.com/rajeshyg/TeluguTutor --skill security-rules-skill
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Rules Skill
Source: https://github.com/rajeshyg/TeluguTutor/tree/main/.claude/skills/security-rules
Command: npx skills add https://github.com/rajeshyg/TeluguTutor --skill security-rules-skill

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill embeds critical security best practices directly into the AI agent's development process, automatically preventing common frontend vulnerabilities like XSS, sensitive data exposure, and insecure data handling. It reduces the risk of security flaws and the need for extensive manual security reviews.

Core Features & Use Cases

  • Input Validation & Sanitization: Enforces strict validation and sanitization of all user input to prevent injection attacks and data corruption.
  • Secret Management: Guides on using environment variables for API keys and sensitive data, preventing hardcoding and accidental exposure.
  • Local Storage & API Security: Provides rules for safe local storage usage (no auth tokens) and secure API communication (HTTPS, response validation).
  • Use Case: When an AI agent is implementing a user input form, this Skill ensures that the input is validated, sanitized, and never rendered directly using dangerouslySetInnerHTML, thereby mitigating XSS risks without explicit security instructions from the user.

Quick Start

Review the implementation of the user registration form for adherence to security rules, specifically focusing on input validation and local storage usage.

Frequently Asked Questions about Security Rules Skill

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent XSS vulnerabilities in React components?▼

Prevent XSS by validating and sanitizing all user input before rendering, and never use `dangerouslySetInnerHTML`. This Skill enforces input validation rules and React security checks to block injection attacks automatically during development.

What's the best way to handle API keys and sensitive data in web applications?▼

Store API keys and secrets in environment variables, never hardcode them in your source code. This Skill ensures you follow secure secret management practices and prevents accidental exposure of credentials.

Can I safely use local storage for authentication tokens?▼

No—local storage is vulnerable to XSS attacks. This Skill prevents storing auth tokens in local storage and guides you toward secure alternatives for sensitive data in frontend applications.

How do I validate and sanitize user input in forms?▼

Apply strict validation rules to reject malformed input and sanitize data before processing or storage. This Skill embeds input validation checks into your development workflow to mitigate injection attacks and data corruption.

What security practices should I follow when calling external APIs?▼

Use HTTPS for all API communication, validate responses, and never expose sensitive data in requests. This Skill enforces secure API communication patterns to reduce risks from external integrations.

Why do I need automated security checks during development?▼

Manual security reviews are time-consuming and error-prone. This Skill automatically detects common frontend vulnerabilities like XSS and insecure data handling as you code, reducing security flaws before production.

Related Skills

Explore More Software Engineering Skills→
sayasaya8039sayasaya8039
2

springboot-security

Implements authentication, authorization, input validation, and security configurations for Java Spring Boot applications.

Community
Intermediate
leonardoteodorooleonardoteodoroo

sast-configuration

Configure Semgrep, SonarQube, and CodeQL for CI/CD security scanning.

Community
Advanced
LiamVDB1LiamVDB1

django-security

Configure Django production settings with security headers and environment variables.

Community
Advanced
langbyyilangbyyi
96

http-parameter-pollution

Identify HTTP parameter pollution vulnerabilities from inconsistent duplicate parameter parsing.

Community
Intermediate