skills.rest
ntluong95
ntluong95COMMUNITY
Explore all skills by this author →
WebsiteGitHub

TypeScript Security

Enforce secure coding practices for TypeScript applications with input validation and sanitization.

Updated Mar 7, 2026
Search Tags:#typescript#security#authentication#validation#sanitization#secrets
One-click install
npx skills add https://github.com/ntluong95/agent-skills-statistics --skill typescript-security-ntluong95
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: TypeScript Security
Source: https://github.com/ntluong95/agent-skills-statistics/tree/main/.github/skills/typescript/security
Command: npx skills add https://github.com/ntluong95/agent-skills-statistics --skill typescript-security-ntluong95

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers write more secure TypeScript code by providing guidelines and best practices for input validation, data sanitization, secret management, and authentication.

Core Features & Use Cases

  • Input Validation: Ensures data integrity and prevents injection attacks using libraries like Zod.
  • Data Sanitization: Protects against Cross-Site Scripting (XSS) attacks using tools like DOMPurify.
  • Secret Management: Guides on securely handling API keys and sensitive configuration via environment variables.
  • Authentication & Authorization: Recommends secure password hashing (Argon2id) and Role-Based Access Control (RBAC).
  • Use Case: When building a new API endpoint that accepts user input, use this Skill to ensure all incoming data is validated and sanitized before processing, preventing common web vulnerabilities.

Quick Start

Use the TypeScript Security skill to validate user input for an API endpoint.

Frequently Asked Questions about TypeScript Security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate and sanitize user input in a TypeScript API to prevent XSS and injection attacks?▼

Validate API input using Zod and sanitize it with DOMPurify to prevent XSS and injection attacks. This enforces data integrity by processing incoming TypeScript data securely before application execution.

What is the best way to manage secrets and API keys in a TypeScript backend application?▼

The best way to manage secrets and API keys in a TypeScript backend is by using environment variables. This approach securely handles sensitive configuration, keeping credentials out of the source code.

How does password hashing with Argon2id work for TypeScript authentication?▼

Argon2id secures TypeScript authentication by hashing passwords to protect against brute-force attacks. Implementing this algorithm ensures credentials are cryptographically secured before storage in your database.

Can I use Role-Based Access Control for authorization in my TypeScript web application?▼

Yes, you can implement Role-Based Access Control (RBAC) to manage authorization in TypeScript web applications. RBAC restricts system access based on user roles, ensuring robust protection against unauthorized actions.

Do I need to follow OWASP guidelines to secure my TypeScript application?▼

Yes, following OWASP guidelines is necessary to secure TypeScript applications against common vulnerabilities. Adhering to these standards provides robust protection for web development, APIs, and backend services.

Related Skills

Explore More Software Engineering Skills→
Zenobia000Zenobia000
20

sunnydata-security

Review server, client, and deployment practices for security vulnerabilities.

Community
Advanced
danwandanwan

convexcheck

Audit deployment configurations for security vulnerabilities and environment variable leaks.

Community
Advanced
davepoondavepoon
3.3k

auth-patterns

Automates NextAuth.js authentication with providers, middleware protection, and RBAC in Next.js apps.

Community
Advanced
kollaboraikollaborai
1

security-review

Identify security vulnerabilities in Python codebases without modifying source files.

Community
Advanced