#security
5 listings tagged security.
Input Validation
Validate untrusted input at the boundary — allowlist, parse-don't-validate, enforce types/limits before it reaches your logic. Use when handling user input or reviewing injection risks.
OAuth 2.0 Flows
Implement OAuth 2.0 correctly — pick the right flow, use PKCE, and store tokens safely. Use when adding "sign in with…", third-party API auth, or reviewing an OAuth integration.
Secrets Management
Keep credentials out of code and logs — secret stores, short-lived tokens, least privilege, rotation. Use when handling API keys/tokens or reviewing for leaked secrets.
Security Auditor
Audits code for security issues — injection, auth flaws, secret leaks, unsafe dependencies — with concrete, prioritized fixes. Use for a security pass on a change or module.
Security Pack
Harden your app: secrets management and input validation skills plus the security-auditor agent.