Security Rules Skill

What problem does it solve?

This Skill embeds critical security best practices directly into the AI agent's development process, automatically preventing common frontend vulnerabilities like XSS, sensitive data exposure, and insecure data handling. It reduces the risk of security flaws and the need for extensive manual security reviews.

Core Features & Use Cases

• Input Validation & Sanitization: Enforces strict validation and sanitization of all user input to prevent injection attacks and data corruption.
• Secret Management: Guides on using environment variables for API keys and sensitive data, preventing hardcoding and accidental exposure.
• Local Storage & API Security: Provides rules for safe local storage usage (no auth tokens) and secure API communication (HTTPS, response validation).
• Use Case: When an AI agent is implementing a user input form, this Skill ensures that the input is validated, sanitized, and never rendered directly using dangerouslySetInnerHTML, thereby mitigating XSS risks without explicit security instructions from the user.

Quick Start

Review the implementation of the user registration form for adherence to security rules, specifically focusing on input validation and local storage usage.