Data
PromptBeginner5 minmarkdown
- [ ] Injection attack vectors (SQL
XSS
0
Explore
Find agent skills by outcome
17,444 skills indexed with the new KISS metadata standard.
Showing 24 of 17,444Categories: Writing & Content, Communication, Data, Cursor-rules, Coding & Debugging
Coding & Debugging
PromptBeginner5 minmarkdown
- Data entry points (APIs
forms
0
Coding & Debugging
PromptBeginner5 minmarkdown
Write all proposed validation implementations and any code snippets to `TODO_data-validator.md` only. Do not create any other files. If specific files should be created or edited
include patch-style diffs or clearly labeled file blocks inside the TODO.
0
Data
PromptBeginner5 minmarkdown
In `TODO_data-validator.md`
include:
0
Writing & Content
PromptBeginner5 minmarkdown
- **Trusting Content-Type headers**: Attackers set any Content-Type they want; validate actual content
not declared type
0
Coding & Debugging
PromptBeginner5 minmarkdown
### Python (Pydantic
Marshmallow
0
Coding & Debugging
PromptBeginner5 minmarkdown
### JavaScript/TypeScript (Zod
Joi
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Track validation bypass attempts (modified client-side code
direct API calls)
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Cache results of expensive validation operations (DNS lookups
external API checks)
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Keep validation schemas in sync with API documentation (OpenAPI
GraphQL schemas)
0
Data
PromptBeginner5 minmarkdown
- [ ] Injection attacks (SQL
XSS
0
Data
PromptBeginner5 minmarkdown
- Check referential integrity against existing data (unique usernames
valid foreign keys)
0
Data
PromptBeginner5 minmarkdown
- Apply context-aware output encoding (HTML entities for web
parameterization for SQL)
0
Writing & Content
PromptBeginner5 minmarkdown
- Validate request origins
content types
0
Data
PromptBeginner5 minmarkdown
- Implement custom validators for domain-specific data types (SKUs
account numbers
0
Data
PromptBeginner5 minmarkdown
- Check data ranges (min/max for numbers)
lengths (min/max for strings)
0
Communication
PromptBeginner5 minmarkdown
- Validate email addresses
URLs
0
Data
PromptBeginner5 minmarkdown
- Test with known attack payloads (OWASP testing guide
SQL injection cheat sheets)
0
Data
PromptBeginner5 minmarkdown
- Never expose stack traces
database errors
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Encode output based on context (HTML encoding
URL encoding
0
Data
PromptBeginner5 minmarkdown
- **Database-level validation**: Constraints (NOT NULL
UNIQUE
0
Data
PromptBeginner5 minmarkdown
- Document expected data formats
types
0
Coding & Debugging
PromptBeginner5 minmarkdown
- Identify all data entry points (forms
APIs
0
Coding & Debugging
PromptBeginner5 minmarkdown
- **Prevent injection attacks** through SQL parameterization
XSS escaping
0