pinpoint-security

What problem does it solve?

This Skill provides guidance and patterns to secure web applications by enforcing authentication, robust input validation, CSP headers with nonces, and Supabase SSR integration. It helps teams implement security-conscious development practices across forms, routes, and server actions.

Core Features & Use Cases

• CSP nonces and security headers: Implement dynamic nonces via middleware and static headers via configuration to prevent XSS.
• Input validation everywhere: Validate all user inputs and form data using a schema-based approach to prevent injection and data corruption.
• Supabase SSR security patterns: Use the SSR wrapper and immediate auth checks after creating the client to protect server actions and pages.
• Auth & authorization discipline: Enforce authorization checks before data access and redirects for unauthenticated users.

Quick Start

Start by integrating the security patterns into your Next.js app: enable middleware for CSP nonces, configure Supabase SSR wrapper, and apply immediate auth checks in server actions.