skills.rest
daniel-heydari-dev
daniel-heydari-devCOMMUNITY
Explore all skills by this author →
GitHub

Web Security

Provide web security best practices with TypeScript code examples.

Updated Feb 11, 2026
Search Tags:#authorization#authentication#sql injection#xss#secure coding#web security#vulnerability prevention
One-click install
npx skills add https://github.com/daniel-heydari-dev/personal-ai-skills --skill web-security-daniel-heydari-dev
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Web Security
Source: https://github.com/daniel-heydari-dev/personal-ai-skills/tree/main/templates/claude/.claude/skills/web-security
Command: npx skills add https://github.com/daniel-heydari-dev/personal-ai-skills --skill web-security-daniel-heydari-dev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers build more secure web applications by providing best practices and code examples to prevent common vulnerabilities.

Core Features & Use Cases

  • Input Validation: Learn how to validate all user input on the server-side to prevent attacks.
  • XSS Prevention: Understand how to escape output and use Content-Security-Policy to prevent Cross-Site Scripting.
  • SQL Injection Prevention: Implement parameterized queries and ORMs to avoid SQL injection vulnerabilities.
  • Authentication & Authorization: Follow best practices for secure user authentication and access control.
  • CSRF Prevention: Learn to use CSRF tokens and SameSite cookies to protect against Cross-Site Request Forgery.
  • Sensitive Data Handling: Securely store and handle sensitive information like passwords and API keys.
  • Security Headers: Implement recommended security headers to enhance web application defense.

Quick Start

Use the Web Security skill to review the security best practices for input validation in a TypeScript project.

Frequently Asked Questions about Web Security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS vulnerabilities in a TypeScript web application?▼

This approach provides TypeScript code examples to prevent SQL injection and XSS by implementing parameterized queries, using ORMs, escaping output, and configuring Content-Security-Policy headers.

What is the best way to implement secure authentication and authorization in web applications?▼

Secure authentication and authorization require strict access control best practices. This resource guides you through implementing secure user authentication flows and access control mechanisms to protect web applications.

How does server-side input validation prevent web security vulnerabilities?▼

Server-side input validation prevents web security vulnerabilities by ensuring all user input is verified before processing. This practice stops malicious payloads from executing and is a core secure coding standard.

Can I use this skill to implement CSRF tokens and SameSite cookies for my project?▼

Yes, you can use this to implement CSRF prevention. It provides specific guidance on using CSRF tokens and SameSite cookies to protect against Cross-Site Request Forgery in web applications.

How do I securely handle sensitive data like passwords and API keys?▼

Securely handling sensitive data like passwords and API keys requires specific storage and handling protocols. This resource offers best practices to securely manage sensitive information throughout your web application.

What security headers should I implement to enhance web application defense?▼

Implementing recommended security headers enhances web application defense against common attacks. This guide outlines the necessary security headers to fortify your web application's overall posture.

Related Skills

Explore More Software Engineering Skills→
tkmh04tkmh04

typescript

Establish TypeScript coding, architecture, testing, and tooling standards.

Community
Advanced
0xRayAI0xRayAI

security-scan

Scan software projects for security vulnerabilities and generate risk reports.

Official
Intermediate
boomNDSboomNDS

api-security-best-practices

Apply authentication, authorization, input validation, and rate limiting patterns to secure APIs.

Community
Advanced
Celia-12Celia-12

external_apis

Proxy external web API calls with automatic authentication and asset storage.

Community
Intermediate