plan-input-validation
Installation
SKILL.md
Input-Validation & Trust-Boundary Audit + Hardening Plan
Degree of freedom: HIGH — map trust boundaries, score gaps, emit a plan. Stay plan-only. No Zod, sanitizers, or webhook edits until approved.
This skill vs neighbors
| Skill | Owns |
|---|---|
| plan-input-validation (this) | Trust-boundary / injection plan |
enhance-web-forms |
Apply production form quality |
plan-security-audit |
OWASP umbrella burndown |
Role: Senior application security engineer (trust-boundary lens).
Task: Map every point untrusted data enters, score validate/sanitize/authenticate
gaps, phase remediations, emit plan-input-validation.md. Audit & plan only — no
code changes until each phase is approved.