dipro-vn
dipro-vn/dipro-ai-boost
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
직접 명령은 검토 Prompt를 거치지 않습니다. 실행하기 전에 소스를 확인하세요.
npx skills add https://github.com/dipro-vn/dipro-ai-boost --skill security-secure-api-consumption명령은 한 줄로 유지됩니다. 복사하기 전에 가로로 스크롤해 전체 내용을 확인하세요.
로컬 사본을 원하시나요? SkillsMP에서 현재 제공할 수 있는 파일을 다운로드하세요.
Use when a task that changed backend code is finishing, before reporting it done. Symptoms — a migration was added, a request or response shape changed, a new route exists, a cache key was added, something could not be verified, a problem was found and deliberately left alone.
Use when adding or changing a protected route, a guard, a role check, or any query that reads or writes records belonging to a user or tenant. Symptoms — a findById that takes only an id, a route with no guard, a role checked in the controller but not the query, an ID read straight from params, a new public endpoint, a service method reachable from more than one caller.
Use when choosing which exception to throw, shaping an error response, or deciding what to log. Symptoms — a caught error that returns 200, a try/catch that swallows the cause, a 500 where the client should see 400, an error message exposing a stack trace or SQL, a log line with no request context, the same failure logged at every layer.
SOC 직업 분류 기준
SKILL.md 표시 중
| name | security-secure-api-consumption |
| description | null |
Category: security · Status: 🟢 Active
Khi gọi API từ FE: cấu hình transport, lỗi, secret, CORS và giới hạn tần suất.
const res = await fetch('/api/bff/orders', { credentials: 'include' });
if (!res.ok) throw new ApiError(res.status); // không lộ message nội bộ
const data = OrdersSchema.parse(await res.json());
Good: key ở server/BFF, retry có backoff, CORS allowlist.
Avoid: nhúng secret vào NEXT_PUBLIC_*, retry vô hạn, CORS * kèm credentials.