| name | security |
| description | Implements security features following OWASP guidelines. Use when validating input, preventing XSS, adding rate limiting, verifying auth, or handling file uploads. Includes security-utils, sanitize-utils, and rate-limiter patterns. |
Security Skill
Instructions
- Validate all input with
security-utils.ts
- Sanitize user content with
SafeMarkdown or sanitizePlainText
- Rate limit all API endpoints
- Verify auth for protected routes
- Check ownership for write operations
Quick Reference
import { validateString, CONTENT_LIMITS } from '@/lib/security-utils'
const result = validateString(input, 'fieldName', { required: true, maxLength: 100 })
import SafeMarkdown from '@/components/SafeMarkdown'
<SafeMarkdown>{userContent}</SafeMarkdown>
import { checkRateLimit, RATE_LIMIT_CONFIGS } from '@/lib/rate-limiter'
const { allowed } = checkRateLimit(clientId, RATE_LIMIT_CONFIGS.AUTHENTICATED_WRITE)
import { verifyAuth } from '@/lib/auth-utils'
const authUser = await verifyAuth(request)
For complete validation patterns, file upload security, and OWASP coverage, see reference.md.