Security Skill

To prevent XSS, CSRF, and SQL injection, enforce security patterns through guided implementation of data validation and secure authentication. This protects frontend and backend infrastructure against common malicious input attacks.

Validate API route input data using Zod schemas by following a security checklist that ensures only authenticated users access endpoints. This prevents malicious input by strictly validating data on both client and server sides.

The best way to manage secrets like API keys and passwords is to follow dedicated secrets management best practices. This securely handles sensitive information across your application infrastructure and prevents unauthorized access.

Implementing secure authentication and authorization requires adhering to a security checklist for API routes and secrets handling. This enforces access control and ensures user login mechanisms are properly secured against vulnerabilities.

You need both client-side and server-side data validation to secure API endpoints because it prevents malicious input from bypassing frontend checks. Enforcing validation on both layers ensures robust protection against common web vulnerabilities.