epic-security

SKILL.md

Design to fail fast and early - Validate security constraints as early as possible. Check authentication, authorization, and input validation before processing requests. Fail immediately with clear error messages rather than allowing potentially malicious data to flow through the system.

Optimize for the debugging experience - When security checks fail, provide clear, actionable error messages that help developers understand what went wrong. Log security events with enough context to debug issues without exposing sensitive information.

Epic Stack uses CSP to prevent XSS and other attacks.

CSP、レート制限、Epic Stack のセッション セキュリティなどのセキュリティ実践に関するガイド ソース: rubenpenap/epic-stack-agent-skills。

原文を見る