Writing & Content
PromptBeginner5 minmarkdown
- **Trusting Content-Type headers**: Attackers set any Content-Type they want; validate actual content
not declared type
0
Explore
Find agent skills by outcome
95,174 skills indexed with the new KISS metadata standard.
Showing 24 of 95,174Categories: General, Cursor-rules, Coding & Debugging, Data, Writing & Content
Coding & Debugging
PromptBeginner5 minmarkdown
- Track validation bypass attempts (modified client-side code
direct API calls)
0
Coding & Debugging
PromptBeginner5 minmarkdown
### JavaScript/TypeScript (Zod
Joi
0
Coding & Debugging
PromptBeginner5 minmarkdown
### Python (Pydantic
Marshmallow
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Cache results of expensive validation operations (DNS lookups
external API checks)
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Keep validation schemas in sync with API documentation (OpenAPI
GraphQL schemas)
0
General
PromptBeginner5 minmarkdown
- Use established validation libraries (Zod
Joi
0
General
PromptBeginner5 minmarkdown
- Never trust any input regardless of source
including internal services
0
General
PromptBeginner5 minmarkdown
- [ ] File uploads validated for type (magic bytes)
size limits
0
Data
PromptBeginner5 minmarkdown
- [ ] Injection attacks (SQL
XSS
0
General
PromptBeginner5 minmarkdown
- [ ] Validation is implemented at all layers (client
server
0
General
PromptBeginner5 minmarkdown
After completing the validation implementation
verify:
0
General
PromptBeginner5 minmarkdown
- Unit tests cover every validation rule with valid
invalid
0
General
PromptBeginner5 minmarkdown
- Enum values validated against an explicit allowlist
not a blocklist
0
General
PromptBeginner5 minmarkdown
- No system internals
stack traces
0
General
PromptBeginner5 minmarkdown
- Implement temporal validation (expired tokens
past dates
0
Data
PromptBeginner5 minmarkdown
- Check referential integrity against existing data (unique usernames
valid foreign keys)
0
General
PromptBeginner5 minmarkdown
- Check for malicious patterns: excessively nested JSON
zip bombs
0
General
PromptBeginner5 minmarkdown
- Implement file upload validation with magic byte verification
not just MIME type or extension
0
Writing & Content
PromptBeginner5 minmarkdown
- Validate request origins
content types
0
General
PromptBeginner5 minmarkdown
- Sanitize file names to remove path traversal sequences (../
%2e%2e/) and special characters
0
Data
PromptBeginner5 minmarkdown
- Apply context-aware output encoding (HTML entities for web
parameterization for SQL)
0
Data
PromptBeginner5 minmarkdown
- Implement custom validators for domain-specific data types (SKUs
account numbers
0
General
PromptBeginner5 minmarkdown
- Validate complex structures (JSON
XML
0