global-validation
Implement comprehensive input validation with server-side security, client-side UX feedback, sanitization, and consistent error messages. Use this skill when validating user input in forms, API endpoints, or data processing. When writing validation rules for data types, formats, ranges, or required fields. When sanitizing input to prevent injection attacks (SQL, XSS, command injection). When providing field-specific error messages to users. When implementing validation at system boundaries like API endpoints or background jobs.
When & Why to Use This Skill
The Global Validation Claude skill provides a comprehensive framework for implementing secure input validation, data sanitization, and user-centric error handling. It focuses on preventing common vulnerabilities like SQL injection and XSS while ensuring consistent data integrity across API endpoints, web forms, and background processes. By integrating server-side security with client-side UX feedback, it helps developers build robust, attack-resistant applications.
Use Cases
- Securing API Endpoints: Validating incoming data structures, types, and formats at system boundaries to prevent malformed or malicious requests.
- Preventing Injection Attacks: Implementing strict sanitization and allowlist-based validation to mitigate risks from SQL injection, Cross-Site Scripting (XSS), and command injection.
- Enhancing User Experience: Generating clear, field-specific error messages and real-time client-side feedback to guide users through complex form submissions.
- Enforcing Business Logic: Validating complex rules such as date ranges, financial balances, and required fields to maintain high data quality and system consistency.
- Code Security Audits: Reviewing existing codebases to identify missing sanitization steps and ensuring consistent validation across all entry points.
| name | Global Validation |
|---|---|
| description | Implement comprehensive input validation with server-side security, client-side UX feedback, sanitization, and consistent error messages. Use this skill when validating user input in forms, API endpoints, or data processing. When writing validation rules for data types, formats, ranges, or required fields. When sanitizing input to prevent injection attacks (SQL, XSS, command injection). When providing field-specific error messages to users. When implementing validation at system boundaries like API endpoints or background jobs. |
When to use this skill:
- When validating user input from forms or UI
- When validating data at API endpoints
- When implementing server-side validation (required for security)
- When adding client-side validation for better UX
- When writing validation rules for data types and formats
- When checking ranges, lengths, or required fields
- When sanitizing input to prevent SQL injection or XSS
- When creating field-specific validation error messages
- When using allowlists instead of blocklists for validation
- When validating business rules (sufficient balance, valid dates)
- When ensuring consistent validation across all entry points
- When reviewing code for input sanitization and security
Global Validation
This Skill provides Claude Code with specific guidance on how to adhere to coding standards as they relate to how it should handle global validation.
Instructions
For details, refer to the information provided in this file: global validation