security - Security patterns and guidelines for levelrise application
Provides security patterns covering CSP headers, authentication, error sanitization, URL validation, cookie flags, and supply-chain monitoring.
Tags
Updated: 2026-09-17Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Configure HTTP security headers
- Update Content Security Policy
- Enforce authentication checks
- Validate user-supplied URLs
- Sanitize API error messages
- Set secure cookie flags
Inputs
- External script resources
- User-supplied URLs
- Server actions and API routes
- npm dependencies
Outputs
- Updated CSP in next.config.ts
- Sanitized error responses
- Validated safe URLs
- Configured HTTP security headers
Requirements
- Next.js framework
- Drizzle ORM
- npm audit in CI