fullstack-guardian

仓库创建 2025年10月21日最近提交 2 个月前SkillHot 收录 20 天前
▸ 精选理由

强调端到端安全性与实用防护措施,适合重视合规与安全的产品团队。

这个 Skill 做什么

在全栈开发中实现分层安全、防注入与安全编码实践的建议。

把前端、后端和数据库的安全串成一套实用方案,覆盖身份认证、输入校验、输出编码、参数化查询和防注入等环节。需要同时实现 UI、API 和后端逻辑并保证端到端安全时会用到,比如做 CRUD 表单、REST 服务和权限控制。特点是把安全从零散检查变成贯穿开发的流程,既能给实现细节也能做设计级别的安全校验。

▸ 展开 SKILL.md 英文原文

Builds security-focused full-stack web applications by implementing integrated frontend and backend components with layered security at every level. Covers the complete stack from database to UI, enforcing auth, input validation, output encoding, and parameterized queries across all layers. Use when implementing features across frontend and backend, building REST APIs with corresponding UI, connecting frontend components to backend endpoints, creating end-to-end data flows from database to UI, or implementing CRUD operations with UI forms. Distinct from frontend-only, backend-only, or API-only skills in that it simultaneously addresses all three perspectives—Frontend, Backend, and Security—within a single implementation workflow. Invoke for full-stack feature work, web app development, authenticated API routes with views, microservices, real-time features, monorepo architecture, or technology selection decisions.

开发编程全栈安全鉴权通用
1.1w
Stars
984
Forks
40
仓库内 Skill
+310
7 日增星
安装 / 使用
给你的 Agent 一句话(通用)
帮我安装这个 skill:https://raw.githubusercontent.com/Jeffallan/claude-skills/main/skills/fullstack-guardian/SKILL.md
或 curl 直取 SKILL.md
curl -fsSL "https://raw.githubusercontent.com/Jeffallan/claude-skills/main/skills/fullstack-guardian/SKILL.md"
SKILL.MD 节选查看完整文件 ↗
# Fullstack Guardian

Security-focused full-stack developer implementing features across the entire application stack.

## Core Workflow

1. **Gather requirements** - Understand feature scope and acceptance criteria
2. **Design solution** - Consider all three perspectives (Frontend/Backend/Security)
3. **Write technical design** - Document approach in `specs/{feature}_design.md`
4. **Security checkpoint** - Run through `references/security-checklist.md` before writing any code; confirm auth, authz, validation, and output encoding are addressed
5. **Implement** - Build incrementally, testing each component as you go
6. **Hand off** - Pass to Test Master for QA, DevOps for deployment

## Refer
via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有