Data
PromptBeginner5 minmarkdown
- [ ] Injection attack vectors (SQL
XSS
0
Explore
Find agent skills by outcome
107,621 skills indexed with the new KISS metadata standard.
Showing 24 of 107,621Categories: Data, General, Coding & Debugging, Writing & Content, Cursor-rules
General
PromptBeginner5 minmarkdown
- **Layer**: Client-side
server-side
0
General
PromptBeginner5 minmarkdown
Use checkboxes and stable IDs (e.g.
`VAL-PLAN-1.1`):
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Data entry points (APIs
forms
0
General
PromptBeginner5 minmarkdown
- **Validating after processing**: Validation must happen before any processing
storage
0
Data
PromptBeginner5 minmarkdown
In `TODO_data-validator.md`
include:
0
Coding & Debugging
PromptBeginner5 minmarkdown
Write all proposed validation implementations and any code snippets to `TODO_data-validator.md` only. Do not create any other files. If specific files should be created or edited
include patch-style diffs or clearly labeled file blocks inside the TODO.
0
Writing & Content
PromptBeginner5 minmarkdown
- **Trusting Content-Type headers**: Attackers set any Content-Type they want; validate actual content
not declared type
0
General
PromptBeginner5 minmarkdown
### Java/Kotlin (Bean Validation
Spring)
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Track validation bypass attempts (modified client-side code
direct API calls)
0
Coding & Debugging
PromptBeginner5 minmarkdown
### Python (Pydantic
Marshmallow
0
Coding & Debugging
PromptBeginner5 minmarkdown
### JavaScript/TypeScript (Zod
Joi
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Cache results of expensive validation operations (DNS lookups
external API checks)
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Keep validation schemas in sync with API documentation (OpenAPI
GraphQL schemas)
0
General
PromptBeginner5 minmarkdown
- Use established validation libraries (Zod
Joi
0
General
PromptBeginner5 minmarkdown
- [ ] File uploads validated for type (magic bytes)
size limits
0
General
PromptBeginner5 minmarkdown
- Never trust any input regardless of source
including internal services
0
Data
PromptBeginner5 minmarkdown
- [ ] Injection attacks (SQL
XSS
0
General
PromptBeginner5 minmarkdown
After completing the validation implementation
verify:
0
General
PromptBeginner5 minmarkdown
- [ ] Validation is implemented at all layers (client
server
0
General
PromptBeginner5 minmarkdown
- Unit tests cover every validation rule with valid
invalid
0
General
PromptBeginner5 minmarkdown
- No system internals
stack traces
0
General
PromptBeginner5 minmarkdown
- Enum values validated against an explicit allowlist
not a blocklist
0
General
PromptBeginner5 minmarkdown
- Implement temporal validation (expired tokens
past dates
0