skills.rest
Tsuchiya2
Tsuchiya2COMMUNITY
Explore all skills by this author →
𝕏@Tsuchiya2_GitHub

Security Standards

Enforce security standards for Go backend HTTP APIs.

Updated Nov 24, 2025
Search Tags:#security#jwt#validation#cors#timeout#ssrf#panic-recovery
One-click install
npx skills add https://github.com/Tsuchiya2/catchup-feed-backend --skill security-standards-tsuchiya2
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Security Standards
Source: https://github.com/Tsuchiya2/catchup-feed-backend/tree/main/.claude/skills/security-standards
Command: npx skills add https://github.com/Tsuchiya2/catchup-feed-backend --skill security-standards-tsuchiya2

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security Standards enforce security best practices across the backend codebase to prevent common vulnerabilities and ensure compliant, robust software.

Core Features & Use Cases

  • JWT authentication enforcement across all protected endpoints, with explicit signature verification, expiration checks, and role-based access control.
  • SSRF prevention through strict outbound URL validation, private IP blocking, and protection against cloud metadata endpoints.
  • Input validation, DoS prevention, CORS enforcement, and timeouts to minimize attack surface and improve resilience.
  • Comprehensive error sanitization and structured logging for secure user feedback and safe debugging.

Quick Start

Integrate these security standards into code reviews, CI checks, and deployment pipelines to enforce secure design.

Frequently Asked Questions about Security Standards

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce JWT authentication and input validation in Go backend services?▼

To enforce JWT authentication and input validation in Go backend services, apply security standards that mandate explicit signature verification, expiration checks, and strict payload sanitation to prevent common API vulnerabilities.

What is the best way to prevent SSRF vulnerabilities when my service makes outbound requests?▼

Preventing SSRF vulnerabilities requires strict outbound URL validation that automatically blocks private IP ranges and protects against cloud metadata endpoints, ensuring your service cannot be manipulated into accessing internal networks.

How do I implement DoS prevention and CORS enforcement for HTTP APIs?▼

Implement DoS prevention and CORS enforcement for HTTP APIs by integrating security standards that apply rate limiting, strict cross-origin policies, and request timeouts to minimize the overall attack surface and improve service resilience.

Can I use this security standard to sanitize error messages and handle panics in my HTTP API?▼

Yes, you can use this security standard to sanitize error messages and handle panics in your HTTP API, as it provides comprehensive error sanitization for secure user feedback and resilient panic recovery for unexpected runtime failures.

How do I integrate security checks into my CI and deployment pipelines for Go services?▼

Integrate security checks into CI and deployment pipelines for Go services by applying these security standards during code reviews and automated checks to enforce secure design and prevent vulnerabilities before deployment.

Related Skills

Explore More Software Engineering Skills→
vlad-ryzhkovvlad-ryzhkov
25

repo-scout

Audit Go backend repositories for API endpoints, infrastructure, and test coverage.

Community
Intermediate
ShankulkarniShankulkarni
1

audit-node-api-auth

Audit Node.js API routes for missing authentication and broken JWT verification.

Community
Advanced
NickCrewNickCrew
29

api-gateway-patterns

Implement API gateway routing, authentication, and traffic management for microservices.

Community
Intermediate
tomztomz

do-networking

Automate DigitalOcean VPC, load balancer, DNS, CDN, and firewall configurations.

Community
Advanced