The Agent Skills Directory

[SAFE]: The skill provides comprehensive security best practices for Node.js development, including the use of security headers via helmet and structured CORS configuration.
[SAFE]: Implements robust input validation using the Zod library to ensure that only well-formed data is processed by the application, reducing the attack surface for malformed input attacks.
[SAFE]: Utilizes parameterized SQL queries in the repository layer, which is the standard defense against SQL injection vulnerabilities.
[SAFE]: Includes rate-limiting patterns for both general API and sensitive authentication endpoints to mitigate brute-force and Denial-of-Service (DoS) attempts.
[SAFE]: Demonstrates secure handling of sensitive data by promoting the use of environment variables for secrets and employing bcrypt for secure password hashing before database storage.
[SAFE]: Error handling patterns are designed to prevent information leakage in production by suppressing stack traces and internal error details for end-users.

nodejs-backend-patterns